intelthreat Goto Github PK

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

attackcti

bucket-stream

Find interesting Amazon S3 Buckets by watching certificate transparency logs.

bzar

A set of Zeek scripts to detect ATT&CK techniques.

detection-hackathon-apt29

Place for resources used during the Mordor Detection hackathon event featuring APT29 ATT&CK evals datasets

donny.github.io

generate-macro

This Powershell script will generate a malicious Microsoft Office document with a specified payload and persistence method.

git-wild-hunt

A tool to hunt for credentials in github wild AKA git*hunt

invoke-wmilm

kql

Kusto Query Language

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

malware-research

Samples, research and documents about any kind of malware and misc source which should be released for the public

microsoft-365-defender-hunting-queries

Sample queries for Advanced hunting in Microsoft 365 Defender

mordor

Re-play Adversarial Techniques

notebooks-forge

A collection of notebooks built for defensive and offensive operations.

penetration-testing-tools

A collection of more than 160+ tools, scripts, cheatsheets and other loots that I have developed over years for Red Teaming/Pentesting/IT Security audits purposes. Most of them came handy on at least one of my real-world engagements.

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

pyintel

regex_for_all

It's inspired by learning KQL and whole credit goes to these two great folks

ti-workshop

Nullcon 2020 and Owasp Seasides 2020 demo content and jupter notebooks

ttp

ttpanalytics