crooksec

crooksec's Stars

• danielmiessler/fabric

  fabric is an open-source framework for augmenting humans using AI. It provides a modular framework for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.

  Language:Go23.8k3204782.5k

• drk1wi/Modlishka

  Modlishka. Reverse Proxy.

  Language:Go4.8k140289879

• clong/DetectionLab

  Automate the creation of a lab environment complete with security tooling and logging best practices

  Language:HTML4.6k154598986

• OTRF/ThreatHunter-Playbook

  A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

  Language:Python4k37233807

• its-a-feature/Mythic

  A collaborative, multi-platform, red teaming framework

  Language:JavaScript3.2k67230429

• optiv/ScareCrow

  ScareCrow - Payload creation framework designed around EDR bypass.

  Language:Go2.7k7568506

• microsoft/Microsoft-365-Defender-Hunting-Queries

  Sample queries for Advanced hunting in Microsoft 365 Defender

  Language:Jupyter Notebook1.9k19736535

• dyne/tomb

  the Crypto Undertaker

  Language:Shell1.3k58330152

• palantir/windows-event-forwarding

  A repository for using windows event forwarding for incident detection and response

  Language:Roff1.2k33525268

• demisto/content

  Demisto is now Cortex XSOAR. Automate and orchestrate your Security Operations with Cortex XSOAR's ever-growing Content Repository. Pull Requests are always welcome and highly appreciated!

  Language:Python1.1k6901.7k

• med0x2e/SigFlip

  SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

  Language:C#1.1k2111182

• rasta-mouse/ThreatCheck

  Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

  Language:C#1k150122

• mitre-attack/attack-scripts

  Scripts and a (future) library to improve users' interactions with the ATT&CK content

  Language:Python5823830148

• SynologyOpenSource/synology-csi

  Language:Go5041666110

• ruzickap/packer-templates

  Scripts and Templates used for generating Vagrant images

  Language:Shell43712103114

• mitre-attack/attack-datasources

  This content is analysis and research of the data sources currently listed in ATT&CK.

  Language:Jupyter Notebook4053210105

• kubernetes-sigs/cluster-api-provider-vsphere

  Language:Go36940958294

• opencybersecurityalliance/stix-shifter

  This project consists of an open source library allowing software to connect to data repositories using STIX Patterning, and return results as STIX Observations.

  Language:Python22834183234

• kh4sh3i/Ransomware-Samples

  Small collection of Ransomware organized by family.

  1722159

• DefensiveOrigins/APT-Lab-Terraform

  Purple Teaming Attack & Hunt Lab - Terraform

  Language:HCL15812732

• PaloAltoNetworks/terraform-templates

  This repo contains Terraform templates to deploy infrastructure on AWS and Azure and to secure them using the Palo Alto Networks Next Generation Firewalls

  Language:Python1475013151

• MahmoudZohdy/Process-Injection-Techniques

  Various Process Injection Techniques

  Language:C++1426022

• keyboardcrunch/sentinelone-queries

  Repository of SentinelOne Deep Visibility queries.

  11711428

• InQuest/ThreatKB

  Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)

  Language:JavaScript961830018

• jeffsf/pyDE1

  Controller for the Decent Espresso DE1

  Language:Python7783716

• Kappa-Dev/ReGraph

  Tool for building graph-based hierarchical knowledge representation systems

  Language:Python738916

• Kirtar22/ATTACK-Threat_Intel

  Graph Representation of MITRE ATT&CK's CTI data

  Language:Python47517

• vmapps/attack2neo

  Import Mitre Att&ck into Neo4j database

  Language:Python322214

• splunk/dsp-plugins-sdk

  Write custom functions for Splunk Data Stream Processor

  Language:Java129

• PaloAltoNetworks/terraform-iac-lab

  Infrastructure as Code lab using Terraform and GCP

  Language:HCL9898