medtemo Goto Github PK
Type: User
medtemo's Projects
aaronlocker
Robust and practical application whitelisting for Windows
adb
Adaptive Document Builder
ansible-splunk-playbook
Install a full Splunk Enterprise Cluster or Universal forwarder using an ansible playbook
arthir
ATT&CK Remote Threat Hunting Incident Response
atomic-red-team
Small and highly portable detection tests based on MITRE's ATT&CK.
awesome-threat-detection
A curated list of awesome threat detection and hunting resources
awesome-windows-domain-hardening
A curated list of awesome Security Hardening techniques for Windows.
beagle
Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.
chainsaw
Rapidly Search and Hunt through Windows Forensic Artefacts
cyberthreathunting
A collection of resources for Threat Hunters
detectionlab
Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices
dfirmindmaps
A repository of DFIR-related Mind Maps geared towards the visual learners!
edr-testing-script
Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-CradleCrafter/Invoke-DOSfuscation payloads
elastalert
Easy & Flexible Alerting With ElasticSearch
event-forwarding-guidance
Configuration guidance for implementing collection of security relevant Windows Event Log events by using Windows Event Forwarding. #nsacyber
evilclippy
A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.
evtx-attack-samples
Windows Events Samples
evtx-to-mitre-attack
Set of EVTX samples (>170) mapped to MITRE Att@k tactic and techniques to measure your SIEM coverage or developed new use cases.
fleet
A flexible control server for osquery fleets
free-incident-response-management-and-documentation-workbook
A free incident response management and documentation workbook
get-baseline
PowerShell Script for Agentless Incident Response
guacamole-docker-compose
Guacamole with docker-compose using PostgreSQL, nginx with SSL (self-signed)
helk
The Hunting ELK
hollows_hunter
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
hunt-detect-prevent
Lists of sources and utilities utilized to hunt, detect and prevent evildoers.
incident-response-with-threat-intelligence
Incident Response with Threat Intelligence, published by Packt
ircollect
Windows Incident Respose Script
kansa
A Powershell incident response framework
koadic
Koadic C3 COM Command & Control - JScript RAT
lolbas
Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.