nganyii Goto Github PK

alienvault-ossim

Alienvault ossim

aptsimulator

A toolset to make a system look as if it was the victim of an APT attack

aws-cloudformation-templates

A collection of useful CloudFormation templates

cdk-eks-demo

Demo to deploy an entire microservices application along with EKS cluster

derbycon-2019files

This is a group of tools that I was planning on releasing During Derbycon 2019 talk if it was accepted or with a blogpost if not.

detection-as-code-example

A POC to implement Detection-as-Code with Terraform and Sumo Logic.

ecs-codepipeline-demo

ECS Blue/Green deployment using AWS CodePipeline and AWS CDK

event-forwarding-guidance

Configuration guidance for implementing collection of security relevant Windows Event Log events by using Windows Event Forwarding. #nsacyber

evt2sigma

Log Entry to Sigma Rule Converter

fnord

Pattern Extractor for Obfuscated Code

gitdorker

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

gr-smart_meters

hardening

Hardening Ubuntu. Systemd edition.

hunting-queries-detection-rules

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

loki

Loki - Simple IOC and Incident Response Scanner

munin

Online hash checker for Virustotal and other services

ostrica

scripts

scripts from pixelbeat.org

sigma

Generic Signature Format for SIEM Systems

signature-base

Signature base for my scanner tools

ssh-auditor

The best way to scan for weak ssh passwords on your network

sysmon-config

Sysmon configuration file template with default high-quality event tracing

sysmon-dfir

Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.

sysmon-modular

A repository of sysmon configuration modules

tpotce

🍯 T-Pot - The All In One Honeypot Platform 🐝

wazuh

Wazuh - The Open Source Security Platform

windows-exploit-suggester

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.

yapscan

Yapscan is a YAra based Process SCANner, aimed at giving more control about what to scan and giving detailed reports on matches.