DragonsBlue

DragonsBlue's Stars

• Ignitetechnologies/Mindmap

  This repository will contain many mindmaps for cyber security technologies, methodologies, courses, and certifications in a tree structure to give brief details about them

  7.3k1.4k

• i3visio/osrframework

  OSRFramework, the Open Sources Research Framework is a AGPLv3+ project by i3visio focused on providing API and tools to perform more accurate online researches.

  Language:Python940250

• Ultimate-Hosts-Blacklist/Ultimate.Hosts.Blacklist

  The Ultimate Unified Hosts file for protecting your network, computer, smartphones and Wi-Fi devices against millions of bad web sites. Protect your children and family from gaining access to bad web sites and protect your devices and pc from being infected with Malware or Ransomware.

  Language:Shell1.3k160

• InfoSecInnovations/concierge

  Repo for Concierge AI dev work

  Language:Python18631

• AzureAD/Azure-AD-Incident-Response-PowerShell-Module

  The Azure Active Directory Incident Response PowerShell module provides a number of tools, developed by the Azure Active Directory Product Group in conjunction with the Microsoft Detection and Response Team (DART), to assist in compromise response.

  Language:PowerShell42549

• d3fend/d3fend

  Public static website for the D3FEND project. For the D3FEND ontology repo see: https://github.com/d3fend/d3fend-ontology

  Language:HTML7513

• Mazars-Tech/AD_Miner

  AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses

  Language:JavaScript1.2k119

• Bert-JanP/Open-Source-Threat-Intel-Feeds

  This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such as IP, URL, CVE and Hash.

  Language:Python60365

• builtbybel/ThisIsWin11

  The real PowerToys for Windows 11

  Language:C#5.2k335

• cisagov/untitledgoosetool

  Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.

  Language:Python91680

• JohnHammond/labs

  Free and publicly available training labs and exercises, for quick copy-and-paste demonstrations, learning and education.

  12311

• JPCERTCC/LogonTracer

  Investigate malicious Windows logon by visualizing and analyzing Windows event log

  Language:Python2.8k448

• blackhillsinfosec/EventLogging

  Automation scripts to deploy Windows Event Forwarding, Sysmon, and custom audit policies in an Active Directory environment.

  Language:PowerShell46568

• cisagov/ScubaGear

  Automation to assess the state of your M365 tenant against CISA's baselines

  Language:PowerShell1.9k238

• malwarejake-public/conference-presentations

  Conference presentations

  472

• cisagov/RedEye

  RedEye is a visual analytic tool supporting Red & Blue Team operations

  Language:TypeScript2.7k276

• meirwah/awesome-incident-response

  A curated list of tools for incident response

  7.8k1.5k

• djust270/IntuneEndpointTools

  A set of tools for managing and diagnosing Intune on Windows endpoints

  Language:PowerShell506

• JaekelEDV/MyAnnotatedITBookshelf

  2

• chvancooten/maldev-for-dummies

  A workshop about Malware Development

  Language:Nim1.6k188

• unifi-utilities/unifios-utilities

  A collection of enhancements for UnifiOS based devices

  Language:Shell4k418

• yangshun/tech-interview-handbook

  💯 Curated coding interview preparation materials for busy software engineers

  Language:TypeScript120k14.9k

• Bert-JanP/Hunting-Queries-Detection-Rules

  KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

  Language:Python1.3k239

• FalconForceTeam/FalconFriday

  Hunting queries and detections

  73583

• leoloobeek/LAPSToolkit

  Tool to audit and attack LAPS environments

  Language:PowerShell828118

• maurice-daly/DriverAutomationTool

  Home of the Driver Automation Tool

  Language:PowerShell406120

• TimMangan/App-Info

  A community sourced information store about applications

  222

• ScarredMonk/SysmonSimulator

  Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detections and correlation rules by Blue teams.

  Language:C836109

• Kaidja/Defender-for-Endpoint

  Defender for Endpoint

  Language:PowerShell274

• MicrosoftDocs/windows-itpro-docs

  This repository is used for Windows client for IT Pro content on Microsoft Learn.

  1.6k2k