v1d1an Goto Github PK

_docs

Ebook repository

aptsimulator

A toolset to make a system look as if it was the victim of an APT attack

arkime

Arkime with inotify

botnets

This is a collection of #botnet source codes, unorganized. For EDUCATIONAL PURPOSES ONLY

caldera

An automated adversary emulation system

cis-security

Playbooks to implement Center for Internet Security (CIS) controls for RHEL7 and RHEL8.

cortex

crawley

The unix-way web crawler

elsec_dr2an

Script to create MITRE ATT&CK Navigator layers from the annotated detection rules in Elastic Security (Kibana).

enablewindowslogsettings

Documentation and scripts to properly enable Windows event logs.

file-upload

fir

Fast Incident Response

karton-yaramatcher

File and analysis artifacts yara matcher for Karton framework

kbn_network

Network Plugin for Kibana

lufi-docker

Docker Image for Lufi, it means Let's Upload that FIle. It's a E2E encrypted file sharing software.

malware-traffic

Download all packet captures from http://malware-traffic-analysis.net/

mwcfg

A Feature Rich Modular Malware Configuration Extraction Utility for MalDuck

mwdb-core

Malware repository component for samples & static configuration with REST API interface.

opencve

CVE Alerting Platform

otx_misp

Imports Alienvault OTX pulses to a MISP instance

pfelk

pfSense/OPNsense + ELK

s1em

This project is a SIEM with SIRP and Threat Intel, all in one.

s1em-agent

a little conf for S1EM

sigma

Generic Signature Format for SIEM Systems

stoq

An open source framework for enterprise level automated analysis.

stoq-plugins-public

stoQ Public Plugins

sysmon-auto-install

Install and auto update scripts for sysmon and winlogbeat

tcpreplay

thephish

ThePhish: an automated phishing email analysis tool

zvelk