Pinned Repositories
AD-Attack-Defense
Attack and defend active directory using modern post exploitation adversary tradecraft activity
APT_CyberCriminal_Campagin_Collections
APT & CyberCriminal Campaign Collection
artifacts
Digital Forensics Artifact Repository
atomic-red-team
Small and highly portable detection tests based on MITRE's ATT&CK.
awesome-incident-response
A curated list of tools for incident response
awesome-reverse-engineering
Reverse Engineering Resources About All Platforms(Windows/Linux/macOS/Android/iOS/IoT) And Every Aspect! (More than 3500 open source tools and 2300 posts&videos)
bcc
BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more
bddisasm
bddisasm is a fast, lightweight, x86/x64 instruction decoder. The project also features a fast, basic, x86/x64 instruction emulator, designed specifically to detect shellcode-like behavior.
HELK
The Hunting ELK
sigma-rules
Sigma rules from Joe Security
ELsaman's Repositories
ELsaman/HELK
The Hunting ELK
ELsaman/sigma-rules
Sigma rules from Joe Security
ELsaman/AD-Attack-Defense
Attack and defend active directory using modern post exploitation adversary tradecraft activity
ELsaman/APT_CyberCriminal_Campagin_Collections
APT & CyberCriminal Campaign Collection
ELsaman/artifacts
Digital Forensics Artifact Repository
ELsaman/atomic-red-team
Small and highly portable detection tests based on MITRE's ATT&CK.
ELsaman/awesome-incident-response
A curated list of tools for incident response
ELsaman/bcc
BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more
ELsaman/bddisasm
bddisasm is a fast, lightweight, x86/x64 instruction decoder. The project also features a fast, basic, x86/x64 instruction emulator, designed specifically to detect shellcode-like behavior.
ELsaman/CheatSheetSeries
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
ELsaman/conti-pentester-guide-leak
Leaked pentesting manuals given to Conti ransomware crooks
ELsaman/Elsaman
Digital Forensic & Incident Responce
ELsaman/EVTX-ATTACK-SAMPLES
Windows Events Attack Samples
ELsaman/FalconFriday
Bi-weekly hunting queries
ELsaman/ghidra
Ghidra is a software reverse engineering (SRE) framework
ELsaman/gsvsoc_cirt-playbook-battle-cards
Cyber Incident Response Team Playbook Battle Cards
ELsaman/Kansa
A Powershell incident response framework
ELsaman/KapeFiles
This repository serves as a place for community created Targets and Modules for use with KAPE.
ELsaman/MalwareSourceCode
Collection of malware source code for a variety of platforms in an array of different programming languages.
ELsaman/PeekabooAV
Peekaboo Extended Email Attachment Behavior Observation Owl
ELsaman/PowerShellLessons
ELsaman/PSBits
Simple (relatively) things allowing you to dig a bit deeper than usual.
ELsaman/Qradar
ELsaman/registry
registery
ELsaman/Reverse-Engineering-Tutorial
A comprehensive reverse engineering tutorial covering x86, x64, 32-bit ARM & 64-bit ARM architectures.
ELsaman/sliver
Adversary Emulation Framework
ELsaman/StreamDivert
Redirecting (specific) TCP, UDP and ICMP traffic to another destination.
ELsaman/SysmonCommunityGuide
TrustedSec Sysinternals Sysmon Community Guide
ELsaman/ThreatPursuit-VM
Threat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and hunting designed for intel and malware analysts as well as threat hunters to get up and running quickly.
ELsaman/Use_Case_Applicability
Security Monitoring Resolution Categories