169cpt Goto Github PK

auditd-attack

A Linux Auditd rule set mapped to MITRE's Attack Framework

autorecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

awesome-threat-detection

A curated list of awesome threat detection and hunting resources

backup-userfiles

Script to back up files from a users profile.

cashcatransomwaresimulator

A simple windows ransomware simulator that will rename .TXT files a ransomware extension to simulate ransomware behavior for testing various monitoring tools

cobalt_strike_extension_kit

Attempting to be an all in one repo for others' userful aggressor scripts as well as things we've found useful during Red Team Operations.

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

docker-draw.io

Dockerized draw.io based on tomcat:9-jre11 & tomcat:9-jre8-alpine official image.

elastic-endpoint-security

endpoint

eric-zimmerman-tool

filebeat-6.8.8

ftk-imager-triage-notes

This is a step by step guide on how to use FTK Imager to pull a forensically sound image of a Windows machine.

generate-files

Script to generate random files of various types and sizes.

get-iocs

Script that will take in a text file and pull out all the IOCs and export them into a Zeek Intel Framework format.

hunting-weapons

Hunt Tool Links

install-update

And old production script I had lying around. It needs some major work, but should be good enough to get started.

invoke-randomuser

Script to create 1000 users and add them to the Domain Admins group.

kansa

A Powershell incident response framework

lansweeper

linux-baseline

DevSec Linux Baseline - InSpec Profile

linux-scripts

Random collection of basic scripts

lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

mysql-baseline

DevSec MySQL Baseline - InSpec Profile

net-obfuscate

Obfuscate ECMA CIL (.NET IL) assemblies to evade Windows Defender AMSI

networkminer

nginx-baseline

DevSec Nginx Baseline - InSpec Profile

offline-pfsense-instructions

Offline install instructions for package install

openvas-offline

Miscellaneous stuff related to OpenVAS / Greenbone source edition

polarbearrepo