mthcht Goto Github PK

10_0_25197_1000

accd

Active C&C Detector

adtimeline

Timeline of Active Directory changes with replication metadata

artifacts

Digital Forensics Artifact Repository

attack-navigator

Web app that provides basic navigation and annotation of ATT&CK matrices

autonomousthreatsweeper

Threat Hunting queries for various attacks

avml

AVML - Acquire Volatile Memory for Linux

awesome-lists

Awesome Security lists for SOC/CERT/CTI

awesome-posters

awesome-tunneling

List of ngrok/Cloudflare Tunnel alternatives and other tunneling software and services. Focus on self-hosting.

awesome-yara

A curated list of awesome YARA rules, tools, and people.

azure-sentinel-notebooks

Interactive Azure Sentinel Notebooks provides security insights and actions to investigate anomalies and hunt for malicious behaviors.

bmc-tools

RDP Bitmap Cache parser

bootloaders

botsv3

Splunk Boss of the SOC version 3 dataset.

c2-tracker

Live Feed of C2 servers, tools, and botnets

chainsaw

Rapidly Search and Hunt through Windows Forensic Artefacts

chepy

Chepy is a python lib/cli equivalent of the awesome CyberChef tool.

cowrie

Cowrie SSH/Telnet Honeypot https://cowrie.readthedocs.io

crassus

cti

Cyber Threat Intelligence Repository expressed in STIX 2.0

deepdarkcti

Collection of Cyber Threat Intelligence sources from the deep and dark web

defenderyara

Extracted Yara rules from Windows Defender mpavbase and mpasbase

det-eng-samples

This repository contains sample log data that were collected after running adversary simulations in Microsoft 365

detect-it-easy

Program for determining types of files for Windows, Linux and MacOS.

detection-rules

Rules for Elastic Security's detection engine

detection-validation

Detection rule validation

dfir-orc

Forensics artefact collection tool for systems running Microsoft Windows

dfir-orc-config

Configurations for DFIR ORC

dfir-toolkit

CLI tools for forensic investigation of Windows artifacts