infosecb Goto Github PK

advent-of-detect-2024

An detection engineering-specific variant of advent of code.

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

attack-navigator

Web app that provides basic navigation and annotation of ATT&CK matrices

auditd-ripper

Python CLI for normalizing, aggregrating, and decoding auditd logs.

awesome

😎 Awesome lists about all kinds of interesting topics

awesome-detection-engineering

Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.

awesome-python

A curated list of awesome Python frameworks, libraries, software and resources

awesome-threat-detection

A curated list of awesome threat detection and hunting resources

bitnami-docker-mediawiki

Bitnami Docker Image for MediaWiki

bluecoat-webpulsir

Check and submit Blue Coat WebPulse website classifications.

content

This repository contains all Demisto content and from here we share content updates

detection-as-code

An example of how to deploy a Detection as Code pipeline using Sigma Rules, Sigmac, Gitlab CI, and Splunk.

disable-remote-nic

A PowerShell script for remotely disabling active Windows 10/2016 device network interfaces.

docker-splunk

Splunk Docker GitHub Repository

fir

Fast Incident Response

full-stack-fastapi-template

Full stack, modern web application template. Using FastAPI, React, SQLModel, PostgreSQL, Docker, GitHub Actions, automatic HTTPS and more.

galah

Galah: an LLM-powered web honeypot using the OpenAI API.

generate_attacknav_layer

A Python CLI utility for quickly converting a list or text file of MITRE ATT&CK technique IDs to a MITRE ATT&CK Navigator layer .JSON file.

generative-ai-for-beginners

12 Lessons, Get Started Building with Generative AI 🔗 https://microsoft.github.io/generative-ai-for-beginners/

gtfobins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

guarddog

:snake: :mag: GuardDog is a CLI tool to Identify malicious PyPI and npm packages

infosecb

infosecb.github.io

ioc_parser_3

Tool to extract indicators of compromise from security reports in PDF format

ipify-me

Python module/cli to get public IP address using ipify's free API.

loobins

Living Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in "living off the land" macOS binaries and how they can be used by threat actors for malicious purposes.

manpm

Shows the relevant part of NPM module's README file right in your terminal

microsearch

mitreattack-python

A python module for working with ATT&CK

normalize-atp-safelink

Python script that normalizes a URL that has been rewritten by Microsoft ATP SafeLink protection.