hestat Goto Github PK

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

blazescan

Blazescan is a linux webserver malware scanning and incident response tool, with built in support for cPanel servers, but will run on any linux based server.

calamity

A script to assist in processing forensic RAM captures for malware triage

chimera

Chimera is a (shiny and very hack-ish) PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

clamav-cortexanalyzer

Analyzer for TheHive Cortex Soc platform. Allows you to run observables against default and custom ClamAV rules.

cobaltstrike

Code and yara rules to detect and analyze Cobalt Strike

cortex-analyzers

Cortex Analyzers Repository

cryptojacking-scanner

Python scanner for scanning websites for crypto-jacking miners.

ctru

Linux Connection Tracking Utility

dnscat2-powershell

A Powershell client for dnscat2, an encrypted DNS command and control tool.

drupal-check

Tool to dive Apache logs for evidence of exploitation of CVE-2018-7600

grab_beacon_config

intel-sharing

Repository of Information sharing on threats and indicators

liquid

lw-yara

Yara Ruleset for scanning Linux servers for shells, spamming, phishing and other webserver baddies

minerchk

Bash script to Check for malicious Cryptomining

misp-scripts

ossec-sysmon

A Ruleset to enhance detection capabilities of Ossec using Sysmon

shellpop

Pop shells like a master.

sitrep

soc-threat-hunting

Repo of python/bash scripts for identifying IoC's in threat feed and other online tools

velociraptor

Digging Deeper....

vt.py

wdatp-hunts