blue-infosec Goto Github PK

cobaltspam

Tool based on CobaltStrikeParser from SentinelOne which can be used to spam a CobaltStrike server with fake beacons

cobaltsplunk

Splunk Dashboard for CobaltStrike logs

cobaltstrike

Code and yara rules to detect and analyze Cobalt Strike

cobaltstrike-config-extractor

Cobalt Strike Beacon configuration extractor and parser.

cobaltstrikeforensic

Toolset for research malware and Cobalt Strike beacons

code

The currently released SimpleRisk source code.

coldpress

Extensible Platform for Malware Analysis

comcast

Simulating shitty network connections so you can build better systems.

comet

Comet is an alert distribution framework which allows you to distribute alerts all the way to the resource owner with customizable owner lookup, de-duplication, alert formatting as well as automated follow up and metrics.

commethodsearcher

Script that searches through all COM objects for any methods containing a key word of your choosing.

community

Repository of modules and signatures contributed by the community

content

Demisto is now Cortex XSOAR. Automate and orchestrate your Security Operations with Cortex XSOAR's ever-growing Content Repository. Pull Requests are always welcome and highly appreciated!

conventionengine

ConventionEngine - A Yara Rulepack for PDB Path Hunting

core

OPNids GUI, API and systems backend

counterattack

Destroy account scammers with this one neat trick! This Python Script will help you shut down phishermen with ease.

cpp

Repository containing sample code

creddefense

Credential and Red Teaming Defense for Windows Environments

credsspreader

A tool to spread canary credentials in your organisation

crescendo

Crescendo is a swift based, real time event viewer for macOS. It utilizes Apple's Endpoint Security Framework.

crt

Contact: [email protected]

cry

Cross platform PoC ransomware written in Go

cryosec

Automated cloud vendor agnostic server, container, and application hardening suite.

cryptoblocker

A script to deploy File Server Resource Manager and associated scripts to block infected users

cryptondie

PoC - cryptonDie is a ransomware developed for study purposes.

cs-bro

Bro scripts written by CrowdStrike Services

csb

Big Data Benchmarking Suite for Cyber-Security Analytics

cscguard

Protects and logs suspicious and malicious usage of .NET CSC.exe and Runtime C# Compilation

cset

Cybersecurity Evaluation Tool

csirt-jump-bag

CSIRT Jump Bag

cti-lexicon