jpressnell Goto Github PK

ace

Analysis Correlation Engine

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

apt_cybercriminal_campagin_collections

APT & CyberCriminal Campaign Collection

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

attack-eval-scoring

autopager

Detect and classify pagination links

aws-labs

A collection of hands-on labs to help learning the fundamentals of AWS cloud computing services.

azgoat

Vulnerable Azure Environment (WIP)

azure-cloud

Here you will find various Azure Demos & Tutorials that I've put together for Azure Cloud using DevOps, Container Services and other PaaS offerings.

book-resources

boombox

Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant

botsv2

Splunk Boss of the SOC version 2 dataset.

bro-sysmon

How to Zeek Sysmon Logs!

car

Cyber Analytics Repository

cascade-server

CASCADE Server

cloud-roles-database

Cloud Roles Database

consuming_services_python_demos

Consuming HTTP and SOAP services in Python course handouts

cookbook

The Data Engineering Cookbook

cve-search

cve-search is a tool to import CVE (Common Vulnerabilities and Exposures) and CPE (Common Platform Enumeration) into a MongoDB to facilitate search and processing of CVEs.

detectionlab

django

The Web framework for perfectionists with deadlines.

docker-splunk

Splunk Docker GitHub Repository

exomailactivity

PowerShell module for querying mail activities

fastir_collector_linux

fleet

A flexible control server for osquery fleets

fsf

File Scanning Framework

gobuster

Directory/File, DNS and VHost busting tool written in Go

grr

GRR Rapid Response: remote live forensics for incident response

helk

The Hunting ELK

irm

Incident Response Methodologies