ion-storm Goto Github PK

abootimg

abootimg for OSX

ace-proctree

Create a cool process tree like https://twitter.com/ACEResponder.

alucard-kernel-jfltexx

Bare repositories for jfltexx (i9505)

anchorwatch

A Rogue Device Detection Script with Email Alerts Functionality for Windows Subsystem

android

ansible-graylog-modules

Ansible modules for the Graylog API

anykernel

AnyKernel for Ultimate Kernel Series

auditd-attack

A Linux Auditd rule set mapped to MITRE's Attack Framework

azsentinel

PowerShell module for Azure Sentinel

azure_labs

bdfproxy

Patch Binaries via MITM: BackdoorFactory + mitmProxy

bluehound

citrixcleanup

cleartmp

Script to clear temp files from Terminal Servers

confluentcyberdemo

Analyze Zeek IDS data with ksqlDB running on Confluent Platform via Docker on your laptop. Or spin up an arbitrary number of AWS hosts, each running Confluent Platform and ksqlDB for use in an instructor-led workshop.

connectwise_sql

Some useful SQL Views/Scripts that I have used

cp-siem

A dockerized demo for illustrating how Confluent can be used in a SIEM Modernization use case.

cryptoalert

Server 2012 and up PowerShell script to detect file drops from Crypto* like programs and shutdown shares.

cryptowall_tools

Ransomware Detection/Cleanup Tools

cti

Cyber Threat Intelligence Repository expressed in STIX 2.0

cve-2014-0160

Heartbleed variants

cyber

detectionlab

Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices

devxexec

dllspy

DLL Hijacking Detection Tool

dradis-powershell-api

An API client wrapper for Dradis Professional written in PowerShell

dropnet

A tool that can be used to close network connections automatically with a given parameters

edgerouter-graylog-extractors

Graylog Extractors for Edgerouter Firewall Logs

edr-testing-script

Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-CradleCrafter payloads

elastalert_hive_alerter

This package allows the use of a custom Elastalert Alert which creates alerts with observables in TheHive using TheHive4Py.