gimbimba Goto Github PK

digital-forensics-lab

Free hands-on digital forensics labs for students and faculty

dispatch

All of the ad-hoc things you're doing to manage incidents today, done for you, and much more!

flightsim

A utility to safely generate malicious network traffic patterns and evaluate controls.

insider-threat-ttp-kb

The principal objective of this project is to develop a knowledge base of the tactics, techniques, and procedures (TTPs) used by insiders in the IT environment. It will establish an Insider Threat TTP Knowledge Base, built upon data collected on insider threat incidents and lessons learned and experience from the ATT&CK knowledge base.

integrations-core

Core integrations of the Datadog Agent

kubesploit

Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.

mappings-editor

Mappings Editor is an interactive, web-based tool created by the Center for Threat-Informed Defense for creating mappings of security capabilities to MITRE ATT&CK®. This tool is available as a public beta.

mappings-explorer

Mappings Explorer enables cyber defenders to understand how security controls and capabilities map onto the adversary behaviors catalogued in the MITRE ATT&CK® knowledge base. These mappings form a bridge between the threat-informed approach to cybersecurity and the traditional security controls perspective.

mitreattack-python

A python module for working with ATT&CK

notes

purpleteam

Purpleteam scripts simulation & Detection - trigger events for SOC detections

salo

Synthetic Adversarial Log Objects: A Framework for synthentic log generation

sigma

Generic Signature Format for SIEM Systems

soc-interview-questions

SOC Interview Questions

sof-elk

Configuration files for the SOF-ELK VM

stratus-red-team

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

summiting-the-pyramid

Summiting the Pyramid is a research project focused on engineering cyber analytics to make adversary evasion more difficult. The research includes a scoring model, methodology, and worked examples.

tex

Telegram Monitor

threatest

Threatest is a CLI and Go framework for end-to-end testing threat detection rules.

threathunting-keywords

Awesome list of keywords and artefacts for Threat Hunting sessions

threathunting-keywords-yara-rules

yara detection rules for hunting with the threathunting-keywords project

tram

TRAM is an open-source platform designed to advance research into automating the mapping of cyber threat intelligence reports to MITRE ATT&CK®.

veris

Vocabulary for Event Recording and Incident Sharing (VERIS)