benjeems

benjeems's Stars

• BishopFox/sliver

  Adversary Emulation Framework

  Language:Go8.7k1527601.2k

• SigmaHQ/sigma

  Main Sigma Rule Repository

  Language:Python8.6k3476102.2k

• zeek/zeek

  Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

  Language:C++6.6k3521.5k1.2k

• clong/DetectionLab

  Automate the creation of a lab environment complete with security tooling and logging best practices

  Language:HTML4.7k154598996

• brimdata/zui

  Zui is a powerful desktop application for exploring and working with data. The official front-end to the Zed lake.

  Language:TypeScript1.8k291k132

• GhostPack/Certify

  Active Directory certificate abuse.

  Language:C#1.6k2928219

• GhostPack/ForgeCert

  "Golden" certificates

  Language:C#647191109

• mandiant/sunburst_countermeasures

  Language:YARA56111612203

• maxpl0it/CVE-2020-1350-DoS

  A denial-of-service proof-of-concept for CVE-2020-1350

  Language:Python23815148

• richiercyrus/Venator

  [⛔️ Deprecated] Venator is a python tool used to gather data for proactive detection of malicious activity on macOS devices.

  Language:Python17610730

• 0x4D31/hassh-utils

  hassh-utils: Nmap NSE Script and Docker image for HASSH - the SSH client/server fingerprinting method (https://github.com/salesforce/hassh)

  Language:Lua565014

• corelight/cve-2021-44228

  Log4j Exploit Detection Logic for Zeek

  Language:Zeek1912218

• corelight/CVE-2020-16898

  A network detection package for CVE-2020-16898 (Windows TCP/IP Remote Code Execution Vulnerability)

  Language:Shell91312

• 0x4D31/hassh

  HASSH is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints can be easily stored, searched and shared in the form of a small MD5 fingerprint.

  Language:Python230