bonusland Goto Github PK

awesome-event-ids

Collection of Event ID ressources useful for Digital Forensics and Incident Response

awesome-incident-response

A curated list of tools for incident response

azsentinelqueries

Repository with Sentinel Analytics Rules and Hunting Queries

azure-sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

blueteam-tools

Tools and Techniques for Blue Team / Incident Response

cb-threat-hunting

copilot-for-security

Microsoft Copilot for Security is a generative AI-powered security solution that helps increase the efficiency and capabilities of defenders to improve security outcomes at machine speed and scale, while remaining compliant to responsible AI principles

crt

Contact: [email protected]

cve-2021-40444

CVE-2021-40444 PoC

cve-2024-22024

Check for CVE-2024-22024 vulnerability in Ivanti Connect Secure

edr-telemetry

This project aims to compare and evaluate the telemetry of various EDR products.

edrhunt

Scan installed EDRs and AVs on Windows

evil_oauth2_app

Creating an Evil OAuth2 application with PHP

evilgophish

evilginx3 + gophish

falconfriday

Bi-weekly hunting queries

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

incident-playbook

Incident Response Process and Playbooks | Goal: Playbooks to be Mapped to MITRE Attack Techniques

incident-response-powershell

PowerShell Digital Forensics & Incident Response Scripts.

installerfiletakeover

itdr

Collection of Microsoft Identity Threat Detection and Response resources.

jupyter-collection

Collection of Jupyter Notebooks by @fr0gger_

karma

API pwndb

kql-use-cases

Threat Hunting query in Microsoft 365 Defender, XDR. Provide out-of-the-box KQL hunting queries - App, Email, Identity and Endpoint.

leaps

A pair programming service using operational transforms

live-forensicator

Powershell Script to aid Incidence Response and Live Forensics | Bash Script for MacOS Live Forensics and Incidence Response

malware-iocs

mdatp

Microsoft 365 Defender - Resource Hub

microsoft-365-defender-hunting-queries

Sample queries for Advanced hunting in Microsoft 365 Defender

microsoft-activation-scripts

A Windows and Office activator using HWID / Ohook / KMS38 / Online KMS activation methods, with a focus on open-source code and fewer antivirus detections.

microsoft-defender-for-endpoint-queries

Microsoft Defender for Endpoint Hunting Queries