janjaom Goto Github PK

apt06202001

Applied Purple Teaming - (ITOCI4hr) - Infrastructure, Threat Optics, and Continuous Improvement - June 6, 2020

aptsimulator

A toolset to make a system look as if it was the victim of an APT attack

attackgen

AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK framework. The tool generates tailored incident response scenarios based on user-selected threat actor groups and your organisation's details.

awesome-cv

:page_facing_up: Awesome CV is LaTeX template for your outstanding job application

awesome-pentest-practice

Hackthebox, Vulnhub, TryHackMe and Real World PenTest

awesome-shodan-queries

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

c2-hunter

Extract C2 Traffic

c2-tracker

Live Feed of C2 servers, tools, and botnets

cortex-automation

Cortex Automation OSINT

custom-bloodhound-queries

desec_honeypot

dirhunt

Find web directories without bruteforce

dnscan

docker-elk

The Elastic stack (ELK) powered by Docker and Compose.

dsiem

Security event correlation engine for ELK stack

elk-tls

elk-wazuh

fastfinder

Incident Response - Fast suspicious file finder

flightsim

A utility to safely generate malicious network traffic patterns and evaluate controls.

forensictools

Collection of forensic tools

h8mail

:mailbox_with_no_mail::mag_right: Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

iatelligence

IATelligence is a Python script that will extract the IAT of a PE file and request GPT to get more information about the API and the ATT&CK matrix related

incident-playbook

GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]

k8s-security-elasticsearch

Kubernetes Elasticsearch Secure Cluster Example

loldrivers

Living Off The Land Drivers

ma-notebook

Notes

malwoverview

Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, InQuest and it is able to scan Android devices against VT.

menagerie

Crowdstrike response script containing various functions for IR/triage

microsoft-365-defender-hunting-queries

Sample queries for Advanced hunting in Microsoft 365 Defender

mysql_bruteforce

Python3 MySQL brute force script.