andreweng Goto Github PK

attack-to-elk

This program exports MITRE ATT&CK framework in ELK dashboard

awesome-threat-detection

A curated list of awesome threat detection and hunting resources

c2channel

dcept

A tool for deploying and detecting use of Active Directory honeytokens

dejavu

DejaVU - Open Source Deception Framework

delilah

django-admin-honeypot

:honey_pot: A fake Django admin login screen page.

docker-nifi

docker-stash

Stash stuff

docker-zeek

Zeek IDS Dockerfile

dockerpot

A docker based honeypot.

elkstack

Single node ELKstack on docker for the purposes of elkstack engineering and development

helk

The Hunting ELK

honey_ports

Very simple but effective honeypot to detect port scanning on your network

honeyd

virtual honeypots

honeyd-python

honeyport

Bash and Python Honeyport scripts

honeypy

A low to medium interaction honeypot.

insights

ioc_extractor

IOC extractor is a mini web application to parse CTI PDF reports and extract possible IOC's per page. This will reduce the work and effort realized by CTI analysts to go through long documents.

machinelearning

Machine learning and artificial intelligence

mysql-honeypotd

Low interaction MySQL honeypot written in C

networkattacksimulator

A environment for testing AI agents against a simulated Network.

ofpot

OpenFlow Honeypot

opencanary

Modular and decentralised honeypot

osfooler-ng

OSfooler-ng prevents remote active/passive OS fingerprinting by tools like nmap or p0f

owa-honeypot

A basic flask based Outlook Web Honey pot

pcapy

Pcapy is a Python extension module that interfaces with the libpcap packet capture library.

post-exploitation-wiki

Post Exploitation Wiki

privategpt

Interact with your documents using the power of GPT, 100% privately, no data leaks