deepaksharma0189 Goto Github PK

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

awesome-red-teaming

List of Awesome Red Teaming Resources

awesome-threat-detection

A curated list of awesome threat detection and hunting resources

crowdstrike-falcon-queries

A collection of Splunk's Search Processing Language (SPL) for Threat Hunting with CrowdStrike Falcon

deepbluecli

detection-rules

detection-rules-1

Rules for Elastic Security's detection engine

evtx-attack-samples

Windows Events Samples

goad

game of active directory

havoc

The Havoc Framework.

impacket

Impacket is a collection of Python classes for working with network protocols.

invoke-atomicredteam

Invoke-AtomicRedTeam is a PowerShell module to execute tests as defined in the [atomics folder](https://github.com/redcanaryco/atomic-red-team/tree/master/atomics) of Red Canary's Atomic Red Team project.

juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

kerberoast

malware-traffic-analysis.net

Download pcap files from http://www.malware-traffic-analysis.net/

mimikatz

A little tool to play with Windows security

mordor

Re-play Adversarial Techniques

presentations

Presentation Slides

redhunt-os

Virtual Machine for Adversary Emulation and Threat Hunting

riskyspn

Detect and abuse risky SPNs

rubeus

Trying to tame the three-headed dog.

sigma

Generic Signature Format for SIEM Systems

sigma-hunting-app

A Splunk App containing Sigma detection rules, which can be updated from a Git repository.

splunk-command-cheat-sheet

Splunk-Command-Cheat-Sheet

threathunter-playbook

A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.

threathunting

A Splunk app mapped to MITRE ATT&CK to guide your threat hunts

veil

Veil 3.1.X (Check version info in Veil at runtime)

vulnerable-ad-plus

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

windapsearch

Python script to enumerate users, groups and computers from a Windows domain through LDAP queries