sc00tlad Goto Github PK

ossem

Open Source Security Events Metadata (OSSEM)

phantom-apps

Phantom Apps Repo

purple-team-attack-automation

Praetorian's public release of our Metasploit automation of MITRE ATT&CK™ TTPs

pyattck

A Python package to interact with the Mitre ATT&CK Framework

redcanary-response-utils

Tools to automate and/or expedite response.

redteaming-tactics-and-techniques

Red Teaming Tactics and Techniques

research

reternal-quickstart

Repo containing docker-compose files and setup scripts without having to clone the individual reternal components

rta

security_content

Splunk Security Content

sigma

Generic Signature Format for SIEM Systems

sigma-hunting-app

A Splunk App containing Sigma detection rules, which can be updated from a Git repository.

sigmaui

SIGMA UI is a free open-source application based on the Elastic stack and Sigma Converter (sigmac)

signature-base

Signature base for my scanner tools

simple-devops-project

soc_workflow_app_ce

SOC Workflow App helps Security Analysts and Threat Hunters explore suspicious events, look into raw events arriving at the Elastic Stack, and view Saved Searches configured by teammates.

speed-siem-use-case-framework

Repository for SPEED SIEM Use Case Framework

sysmon-config

Sysmon configuration file template with default high-quality event tracing

sysmon-modular

A repository of sysmon configuration modules

tcm-security-sample-pentest-report

Sample pentest report provided by TCM Security

threathunter-playbook

A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

threathunting

An informational repo about hunting for adversaries in your IT environment.

vectr

VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios

windows-event-forwarding

A repository for using windows event forwarding for incident detection and response

windows-itpro-docs

This is used for contributions to the Windows 10 content for IT professionals on docs.microsoft.com.

yargen

yarGen is a generator for YARA rules