cyb3rsn0rlax Goto Github PK

bettersafetykatz

BetterSafetyKatz

defendercheck

Identifies the bytes that Microsoft Defender flags on.

dfirmindmaps

A repository of DFIR-related Mind Maps geared towards the visual learners!

elk4qradar

Collecting offenses metadata and generating metrics using ELK stack

elk_health_check

Script for automating basic health check tasks

etlparser

Binary commandline executable to parse ETL files

evtx-attack-samples

Windows Events Samples

filetest

flare-vm

fortinet-2-elasticsearch

Fortinet products logs to Elasticsearch

h1l021.github.io

mordor

Re-play Adversarial Techniques

netloader

Loads any C# binary in mem, patching AMSI and bypassing Windows Defender

ossem-dm

OSSEM Detection Model

pcap-attack

PCAP Samples for Different Post Exploitation Techniques

pentest-tools-collection

psir

PowerShell Incident Response

qradar-aqlqueries

Useful AQL Queries

qradar-ruleset

QRadar Export the rule set for printing

rdp-nla

RDP usage artifacts with and without NLA enabled

shad0w

A post exploitation framework designed to operate covertly on heavily monitored enviroments

sharpcollection

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

sira

Security Incident Response Automation

threathunter-playbook

A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.

wela

WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）

wincollect

winterfell

Winterfell are a group of windows batch scripts to collect Windows forensics data and perform efficient, and fast incident response and threat hunting activities.

wireguard-install

WireGuard VPN installer for Linux servers