gimbimba Goto Github PK

followers: 0.0 following: 3.0 repos: 39.0 gists: 3.0

Type: User

gimbimba's Projects

adaz

:wrench: Deploy customizable Active Directory labs in Azure - automatically.

adversary_emulation_library

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

amazon-ssm-agent

An agent to enable remote management of your EC2 instances, on-premises servers, or virtual machines (VMs).

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.

attack-powered-suit

ATT&CK Powered Suit is a browser extension that puts the complete MITRE ATT&CK® knowledge base at your fingertips with text search, context menus, and ATT&CK Navigator integration.

attack-sync

ATT&CK Sync is a Center for Threat-Informed Defense project that aims to improve the ability for organizations to consume MITRE ATT&CK® version updates into their internal systems and processes.

attackgen

AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK framework. The tool generates tailored incident response scenarios based on user-selected threat actor groups and your organisation's details.

awesome

😎 Awesome lists about all kinds of interesting topics

awesome-cloud-security

A curated list of awesome cloud security blogs, podcasts, standards, projects, and examples.

awesome-honeypots

an awesome list of honeypot resources

awesome-lists

Security lists for SOC detections

awesome-windows-red-team

A curated list of awesome Windows frameworks, libraries, software and resources for Red Teams

aws-customer-playbook-framework

This repository provides sample templates for security playbooks against various scenarios when using Amazon Web Services.

aws_surface_mapping

Projeto desenvolvido para fazer a listagem de portas abertas no firewall de máquinas EC2 de contas AWS

awsattacks

This repo contains IOC, malware and malware analysis associated with AWS cloud

chronicle-detection-rules

Collection of YARA-L 2.0 sample rules for the Chronicle Detection API

cloud-analytics

Cloud Analytics helps defenders detect attacks to their cloud infrastructure by developing behavioral analytics for cloud platforms as well as a blueprint for how others can create and use cloud analytics effectively.

cti-blueprints

CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable reports more consistently and efficiently.

cti-stix2-json-schemas

OASIS TC Open Repository: Non-normative schemas and examples for STIX 2

ddexec

A technique to run binaries filelessly and stealthily on Linux by "overwriting" the shell's process with another.

defending-iaas-with-attack

Defending IaaS with ATT&CK is a project to create a collection of ATT&CK techniques relevant to a Linux IaaS environment, as well as a methodology for creating technique collections.

detection-rules

Rules for Elastic Security's detection engine

dispatch

All of the ad-hoc things you're doing to manage incidents today, done for you, and much more!

flightsim

A utility to safely generate malicious network traffic patterns and evaluate controls.

insider-threat-ttp-kb

The principal objective of this project is to develop a knowledge base of the tactics, techniques, and procedures (TTPs) used by insiders in the IT environment. It will establish an Insider Threat TTP Knowledge Base, built upon data collected on insider threat incidents and lessons learned and experience from the ATT&CK knowledge base.

integrations-core

Core integrations of the Datadog Agent

kubesploit

Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.

mappings-explorer

Mappings Explorer enables cyber defenders to understand how security controls and capabilities map onto the adversary behaviors catalogued in the MITRE ATT&CK® knowledge base. These mappings form a bridge between the threat-informed approach to cybersecurity and the traditional security controls perspective.

purpleteam

Purpleteam scripts simulation & Detection - trigger events for SOC detections

sigma

Generic Signature Format for SIEM Systems

gimbimba Goto Github PK

gimbimba's Projects

Recommend Projects

Recommend Topics

Recommend Org