sbousseaden Goto Github PK

adama

Searches For Threat Hunting and Security Analytics

apt_cybercriminal_campagin_collections

APT & CyberCriminal Campaign Collection

apt_digital_weapon

Indicators of compromise (IOCs) collected from public resources and categorized by Qi-AnXin.

apt_report

Interesting apt report collection and some special ioc express

asyncrat-c-sharp

Open-Source Remote Administration Tool For Windows C# (RAT)

auditd

Best Practice Auditd Configuration

azorult

Leaked AzoRult Panel

basicinputoutput

collateral from http://basicinputoutput.com

conventionengine

ConventionEngine - A Yara Rulepack for PDB Path Hunting

core-win32

RCS Agent for Windows (32bit)

cve-2020-0688_exp

CVE-2020-0688_EXP Auto trigger payload & encrypt method

cve-2020-0796-poc

PoC for triggering buffer overflow via CVE-2020-0796

defcon_27_windbg_workshop

DEFCON 27 workshop - Modern Debugging with WinDbg Preview

detection-rules

Rules for Elastic Security's detection engine

empire

Empire is a PowerShell and Python post-exploitation agent.

eqllib

evtx-attack-samples

Windows Events Attack Samples

evtx2es

Import Windows Eventlogs(.evtx) to ElasticSearch.

exchangelogcollector

Exchange Log Collection Script

fastir_artifacts

Live forensic artifacts collector

hastyseries

ObscurityLabs RedTeam C# Toolkit

hyperdbg

The Source Code of HyperDbg Debugger 🐞

infinityhook

Hook system calls, context switches, page faults and more.

injectallthethings

Seven different DLL injection techniques in one single project.

injection

injection-1

Windows process injection methods

ioc-scanner-cve-2019-19781

Indicator of Compromise Scanner for CVE-2019-19781

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

macos-attack-dataset

JSON DataSet for macOS mapped to MITRE ATT&CK Tactics.

mail-security-tester

A testing framework for mail security and filtering solutions.