andy-smith-tracebit's Stars
mitre/caldera
Automated Adversary Emulation Platform
BushidoUK/Ransomware-Tool-Matrix
A resource containing all the tools each ransomware gangs uses
sundruid/muonfp
MuonFP is an enterprise ready, TCP passive fingerprinter written in Rust that has no external dependencies such as WireShark or other open source software.
mthcht/awesome-lists
Awesome Security lists for SOC/CERT/CTI
gabrielsroka/gabrielsroka.github.io
My website, including rockstar: Export Okta Users, Groups, etc. to CSV. Show SAML assertion.
boostsecurityio/poutine
boostsecurityio/poutine
HackingLZ/IndicatorOfCanary
Canary Detection
marksowell/aws-account-finder
Find an AWS Account ID from any S3 Bucket
tracebit-com/find-s3-account
Sample code for finding AWS Account ID of an S3 bucket.
referefref/honeydet
Signature based honeypot detector tool written in Golang
hcpadkins/grove
A Software as a Service (SaaS) log collection framework.
center-for-threat-informed-defense/adversary_emulation_library
An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
tsale/EDR-Telemetry
This project aims to compare and evaluate the telemetry of various EDR products.
tracebit-com/cloudtrail-latency-investigation
Jupyter notebook for investigating CloudTrail latency using Athena and matplotlib.
sudosammy/knary
A simple HTTP(S) and DNS Canary bot with Slack/Discord/MS Teams/Lark/Telegram & Pushover support
tb0hdan/domains
World’s single largest Internet domains dataset
hashicorp-forge/grove
A Software as a Service (SaaS) log collection framework.
pushsecurity/saas-attacks
Offensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they face. #nolockdown