bigbrobro Goto Github PK

supermem

A python script developed to process Windows memory images based on triage type.

suricata-rules

Suricata IDS rules

suricata-scripts

Suricata Lua 定制化脚本

suricata_open

swaks

Swaks - Swiss Army Knife for SMTP

sweetpotato

Modifying SweetPotato to support load shellcode and webshell

sweetpotato-1

Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019

swift-attack

Unit tests for blue teams to aid with building detections for some common macOS post exploitation methods.

syscallhide

Create a Run registry key with direct system calls. Inspired by @Cneelis's Dumpert and SharpHide.

sysmon

A collection of useful PowerShell tools to collect, organize, and visualize Sysmon event data

sysmon-arangodb

Threat hunting with Sysmon and ArangoDB Graphs

sysmon-auto-install

Install and auto update scripts for sysmon and winlogbeat

sysmon-configs

Various complete configs

sysmon-dfir

Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.

sysmon-extract

Extract logs based off events from sysmon. Comes as a package, cli and ui.

sysmon-modular

A repository of sysmon configuration modules

sysmon2neo4j

sysmoncommunityguide

TrustedSec Sysinternals Sysmon Community Guide

sysmonforlinux

sysmonhunter

An easy ATT&CK-based Sysmon hunting tool, showing in Blackhat USA 2019 Arsenal

sysmonrnn

All necessary code in order to feed Sysmon data into Recurrent Neural Network

sysmonsearch

Investigate suspicious activity by visualizing Sysmon's event log

sysmontools

Utilities for Sysmon

sysmonx

SysmonX - An Augmented Drop-In Replacement of Sysmon

syspce

System Processes Correlation Engine

systemexplorer

Windows System Explorer

systemtoken

Steal privileged token to obtain SYSTEM shell

systracingpoc

CVE-2020-0668 - Microsoft Windows Service Tracing Arbitrary File Move Local Privilege Escalation Vulnerability

syswhispers

AV/EDR evasion via direct system calls.

syswhispers2

AV/EDR evasion via direct system calls.