star-dot-star Goto Github PK

awesome-azure-policy

A curated list of blogs, videos, tutorials, code, tools, scripts, and anything useful to help you learn Azure Policy - by @JesseLoudon

awesome-ctf

A curated list of CTF frameworks, libraries, resources and softwares

badblood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

beaker

Beacon Kibana Executable Report. Aggregates Sysmon Network Events With Elasticsearch and Kibana

benchmarks

CIS Benchamarks Mirror

bro-cheatsheets

Bro Log Cheatsheets

cloud-pen-testing

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

crowdstrike-falcon-queries

A collection of Splunk's Search Processing Language (SPL) for Threat Hunting with CrowdStrike Falcon

crowdstrike-rtr-scripts

crt

Contact: [email protected]

ctf-tools

Some setup scripts for security research tools.

enterprisepurpleteaming

Purple Team Resources for Enterprise Purple Teaming: An Exploratory Qualitative Study. Doctor of Science Cybersecurity at Marymount University Dissertation by Xena Olsen.

espy

Endpoint detection for remote hosts for consumption by RITA and Elasticsearch

forensics

Scripts and code referenced in CrowdStrike blog posts

incident-playbook

GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]

microburst

A collection of scripts for assessing Microsoft Azure security

my-infosec-awesome

My curated list of awesome links, resources and tools on infosec related topics

passer

Passive service locator, a python sniffer that identifies servers, clients, names and much more

pimpmykali

Kali Linux Fixes for Newly Imported VM's

plumhound

Bloodhound for Blue and Purple Teams

post-exploitation

Post Exploitation Collection

powerzure

PowerShell framework to assess Azure security

prowler

Prowler is an Open Source Security tool for AWS, Azure and GCP to perform Cloud Security best practices assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more.

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

red-teaming-toolkit

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

report_examples

Example reports from prior years of the Collegiate Penetration Testing Competition

repos

List of Repositories

rita

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

shellshocker-pocs

Collection of Proof of Concepts and Potential Targets for #ShellShocker