blue-infosec Goto Github PK

malwless

Test Blue Team detections without running any attack.

malwoverview

Malwoverview is a first response tool used for downloading and screening malware samples, suspicious URLs, IP address, domains. Malwoverview offers threat hunting information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, ThreatCrowd, Valhalla and it is able to scan Android devices against VT and HA.

malzoo_serverless

Serverless implementation of the Malzoo static malware analyzer

managedpasswordfilter

Windows Password Filter that uses managed code internally

manalyze

A static analyzer for PE executables.

mandiant-azure-ad-investigator

mandiant_managed_hunting

Azure Deployment Templates for Mandiant Managed Huning

margaritashotgun

Remote Memory Acquisition Tool

mass_triage_tools

Mass Triage Tools

mate

Mitre Att&ck Technique Emulation

maturity-models

Node application to help managing Maturity Models like the ones created by BSIMM and OpenSAMM

maxmindfrauddetection

Free extension that uses Maxmind's fraud detection services. Extension that gives fraud scores/details to magento orders.

mdiextractor

megadev

Bro IDS + ELK Stack to detect and block data exfiltration

melting-cobalt

A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object

memhunter

Live hunting of code injection techniques

memlabs

Educational, CTF-styled labs for individuals interested in Memory Forensics

memorypatchdetector

Detects code differentials between executables in disk and the corresponding processes/modules in memory

mercury

Mercury: network metadata capture and analysis

meta-blue

Meta-Blue is a powershell threat hunting tool with least frequency of occurence analysis in mind.

metron

Apache Metron

mfasweep

A tool for checking if MFA is enabled on multiple Microsoft Services

mft2es

A library for fast import of Windows Master File Table($MFT) into Elasticsearch.

mhn

Modern Honey Network

mia-mailitemsaccessed-

Tool to extract Sessions, MessageID(s) and find the emails belonging to MessageID(s). This script utilizes the MailItemsAccessed features from the Office 365 Audit Log.

miasm

Reverse engineering framework in Python

microburst

A collection of scripts for assessing Microsoft Azure security

microsoft-365-extractor-suite

A set of PowerShell scripts that allow for complete and reliable acquisition of the Microsoft 365 Unified Audit Log

microsoft-azure-ad-conditional-access-validator

This script validates the most common Conditional Access policies in Microsoft 365.

microsoft-blue-forest

Creating a hardened "Blue Forest" with Server 2016/2019 Domain Controllers