1_cdp

01 Practical DevSecOps

abstractionmaps

atc-react

A knowledge base of actionable Incident Response techniques

atomic-threat-coverage

Actionable analytics designed to combat threats

captain

Userland API monitor for threat hunting

ccxdigger

The CyberCX Digger project is designed to help Australian organisations determine if they have been impacted by certain high profile cyber security incidents. Digger provides threat hunting functionality packaged in a simple-to-use tool, allowing users to detect certain attacker activities; all for free.

demos

Repo Filled With Follow Along Guides

elastic-stack-docker-part-one

Getting up and running with Elastic Stack on Docker-Compose

enablewindowslogsettings

Documentation and scripts to properly enable Windows event logs.

etwprocessmon2

ETWProcessMon2 is for Monitoring Process/Thread/Memory/Imageloads/TCPIP via ETW + Detection for Remote-Thread-Injection & Payload Detection by VirtualMemAlloc Events (in-memory) etc.

evtx-attack-samples

Windows Events Attack Samples

fanavarr

honeybadger

incident-response-powershell

PowerShell Digital Forensics & Incident Response Scripts.

junos_space

Junos Space troubleshooting notes

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

paramspider

Mining parameters from dark corners of Web Archives

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

python-for-finance-investment-fundamentals-and-data-analytics

Python for Finance: Investment Fundamentals and Data Analytics, published by Packt

python_course

Learning python

rules-wazuh

Wazuh/OSSEC Rules

sigma_to_wazuh

Convert Sigma rules to Wazuh rules

sysmon-cheatsheet

All sysmon event types and their fields explained

sysmon-config

Sysmon configuration file template with default high-quality event tracing

sysmon_wazuh_samples

Sysmon and wazuh integration with Sigma sysmon rules [updated]

threat-hunting-notebook

Collection of Jupyter Notebook for Threat Hunting and Blue Team Purposes

tools

trufflehog

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

velociraptor-docs

Documentation site for Velociraptor

velociraptor-to-timesketch