ZikyHD

ZikyHD's Stars

• nektos/act

  Run your GitHub Actions locally 🚀

  Language:Go58.9k1681.2k1.5k

• tomnomnom/gron

  Make JSON greppable!

  Language:Go14k9088329

• blackorbird/APT_REPORT

  Interesting APT Report Collection And Some Special IOC

  Language:Python2.5k2134522

• mattnotmax/cyberchef-recipes

  A list of cyber-chef recipes and curated links

  2.1k916263

• last-byte/PersistenceSniper

  Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

  Language:PowerShell2k4315199

• certsocietegenerale/FIR

  Fast Incident Response

  Language:JavaScript1.9k119229509

• statping-ng/statping-ng

  An updated drop-in for statping. A Status Page for monitoring your websites and applications with beautiful graphs, analytics, and plugins. Run on any type of environment.

  Language:Vue1.7k13219163

• vxunderground/VX-API

  Collection of various malicious functionality to aid in malware development

  Language:C++1.6k4814263

• infosecB/awesome-detection-engineering

  Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.

  95128085

• tclahr/uac

  UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.

  Language:Shell9292665142

• infosecn1nja/awesome-mitre-attack

  A curated list of awesome resources related to Mitre ATT&CK™ Framework

  596421147

• advanced-threat-research/Yara-Rules

  Repository of YARA rules made by Trellix ATR Team

  Language:YARA584501080

• a0rtega/metame

  metame is a metamorphic code engine for arbitrary executables

  Language:Python579281688

• JohnHammond/vbe-decoder

  A Python3 script to decode an encoded VBScript file, often seen with a .vbe file extension

  Language:Python1875230

• kevoreilly/capemon

  capemon: CAPE's monitor

  Language:C111124453

• siriussecurity/dettectinator

  Dettectinator - The Python library to your DeTT&CT YAML files.

  Language:Python1098612

• airbus-cert/vbSparkle

  VBScript & VBA source-to-source deobfuscator with partial-evaluation

  Language:C#7510112

• InQuest/yara-rules-vt

  Collection of YARA rules designed for usage through VirusTotal.com.

  Language:YARA67737

• skaji/relocatable-perl

  self-contained, portable perl binaries

  Language:Perl675109

• typosquatter/ail-typo-website

  Website for ail-typo-squatting library

  Language:JavaScript58654

• iomoath/yara-scanner

  YaraScanner is a file pattern-matching tool based on YARA rules.

  Language:Python565014

• sdckey/EnScript-Samples

  This repository is a collection of EnScript code samples for use in the OpenText EnCase application.

  Language:C#53141514

• JohnHammond/wfi

  Windows File Integrity -- an archive of information on installed Windows binaries.

  31302

• daveherrald/SA-attck_nav

  Splunk App for MITRE Att&CK Navigator(TM)

  Language:JavaScript231105

• Tholep/mpeepdf

  mpeepdf is a modified version of a powerful Python tool - peepdf to analyze PDF documents

  Language:Python152

• wagga40/Mitre2Datatables

  Bring Your Own Mitre Att&ck © Matrix !

  Language:Python13102

• wagga40/Zircolite-Rules

  Sigma rules converted for direct use with Zircolite

  Language:Python13243

• cybersheepdog/Threat-Hunting-Metrics

  Threat Hunting is time consuming enough as it is. Coming up with and tracking metrics to justify your hunt team to the Execs often takes time away from your Threat Hunting. I have created this Excel document to help automate as much of that as possible. The Strategic Overview tab is auto-updated based upon what you enter in the Threat Hunts Tab.

  11100

• doksu/TA-jsontools

  JSON Tools Technology Add-On for Splunk

  Language:Python10224

• Saket-Upadhyay/ProcPuppy

  Multi-threaded Yara-based process memory scanner for *nix systems.

  Language:Python2101