originalpwnster Goto Github PK

aptsimulator

A toolset to make a system look as if it was the victim of an APT attack

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

attack_data

A Repository of curated datasets from various attacks

attack_range

A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk

attack_range_cloud

Attack Range to test detection against nativel serverless cloud services and environments

attack_range_local

Build a attack range in your local machine

attackdetection

Attack Detection

autopsy-plugins

Autopsy Python Plugins

awesome-yara

A curated list of awesome YARA rules, tools, and people.

botsv1

botsv2

Splunk Boss of the SOC version 2 dataset.

capa-rules

Standard collection of rules for capa: the tool for enumerating the capabilities of programs

capev2

Malware Configuration And Payload Extraction

detectionlab

Automate the creation of a lab environment complete with security tooling and logging best practices

detectionlab-deploy-env

Add-On for the popular detection lab to quickly get some users, vulnerablites and action

detectionlab_esxi

Configuration files for deploying DetectionLab on ESXi

detectionlabelk

DetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.

docker-splunk

Splunk Docker GitHub Repository

eventgen

Splunk Event Generator: Eventgen

evtx-attack-samples

Windows Events Attack Samples

grafana

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

karton

Distributed malware processing framework based on Python, Redis and MinIO.

malconfscan

Volatility plugin for extracts configuration data of known malware

malware-ioc

Indicators of Compromises (IOC) of our various investigations

malwoverview

Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, ThreatCrowd, Valhalla, Malware Bazaar, ThreatFox, Triage and it is able to scan Android devices against VT and HA.

misp-taxonomies

Taxonomies used in MISP taxonomy system and can be used by other information sharing tool.

reversinglabs-yara-rules

ReversingLabs YARA Rules

sa-ctf_scoreboard

sa-ctf_scoreboard_admin

security_content

Splunk Security Content