cyb3r-monk Goto Github PK

accd

Active C&C Detector

adconnectdump

Dump Azure AD Connect credentials for Azure AD and Active Directory

adexplorersnapshot.py

ADExplorerSnapshot.py is an AD Explorer snapshot ingestor for BloodHound.

alcatraz

x64 binary obfuscator

alerting-detection-strategy-framework

A framework for developing alerting and detection strategies for incident response.

appcompatprocessor

"Evolving AppCompat/AmCache data analysis beyond grep"

applied_data_science_owasp2020

apt-lab-terraform

Purple Teaming Attack & Hunt Lab - Terraform

at-ps

Adversary Tactics - PowerShell Training

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

attack-flow

ATT&CK Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.

azure-docs

Open source documentation of Microsoft Azure

azure-kql

Azure KQL (Kusto Query Language) tips, tricks and best practices for Threat Hunting, Blue Teaming, etc.

bind9_logparse_stat

A simple frequency analysis script for bind9 DNS query logs. Is able to analyze based on client IP address, DNS domain name, and DNS query type. Uses both regular expressions, and the Counter() dictionary from the Python collections module. Is written to demonstrate how useful the combination of a Counter() dictionary and regular expressions are.

blackout

kill anti-malware protected processes using BYOVD

blue-teaming-with-kql

Repository with Sample KQL Query examples for Threat Hunting

blue_teams_course

blueteam_homelabs

Great List of Resources to Build an Enterprise Grade Home Lab

c9-python-getting-started

Sample code for Channel 9 Python for Beginners course

cheat-sheets

Cheat sheets for threat hunting, detection and other stuff.

ciphey

Automated decryption tool

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

cobaltstrike-beacon-data

Open Dataset of Cobalt Strike Beacon metadata (2018-2022)

cryptofile

Encrypt or decrypt files using AES-256 or AES-128

cryptolocked-ng

An updated version of the cryptolocked (anti-ransomware) toolkit. Adds new features such as the hunter module.

cyb3rmonk

Whoami

cyberlabs

dataexplorer-docs

Azure Data Explorer

datamate

defensivesysmon

Repository for Defensive applications of Windows Sysmon