dstaulcu

dstaulcu's Stars

• EliteLoser/Get-ADGroupMemberRecursive

  Get AD group members recursively, tagged with root group DN and direct parent group DN

  Language:PowerShell81

• google/magika

  Detect file content types with deep learning

  Language:Rust7.7k400

• P4T12ICK/Sigma2SplunkAlert

  Converts Sigma detection rules to a Splunk alert configuration.

  Language:Python10521

• P4T12ICK/Sigma-Hunting-App

  A Splunk App containing Sigma detection rules, which can be updated from a Git repository.

  Language:Python10622

• StevenBlack/hosts

  🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

  Language:Python26.4k2.2k

• jpsider/RestPS

  Simple ReST Framework for Powershell

  Language:HTML11430

• super0xbad1dea/SysmonVersions

  134

• splunk/splunk-dashboard-framework-custom-inputs

  Conf22 demo showing a flight price dashboard with SUI and Dashboard Framework

  Language:JavaScript62

• Sysinternals/SysmonForLinux

  Language:C1.7k181

• mitre/cti

  Cyber Threat Intelligence Repository expressed in STIX 2.0

  1.7k409

• olafhartong/sysmon-modular

  A repository of sysmon configuration modules

  Language:PowerShell2.6k582

• olafhartong/ThreatHunting

  A Splunk app mapped to MITRE ATT&CK to guide your threat hunts

  1.1k177

• My-Random-Thoughts/Rapid7Nexpose

  The most feature complete PowerShell module available for the Rapid7 Nexpose/InsightVM APIv3

  Language:PowerShell5919

• fhbilgen/WaitChain

  Show process's wait chain list and optionally call procdump to generate dump files

  Language:C++71

• ScarredMonk/SysmonSimulator

  Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detections and correlation rules by Blue teams.

  Language:C829108

• trustedsec/SysmonCommunityGuide

  TrustedSec Sysinternals Sysmon Community Guide

  Language:CSS1.1k166

• stevea78/poolmon-powershell

  Powershell script to view kernel memory pool information

  Language:PowerShell42

• NickeManarin/ScreenToGif

  🎬 ScreenToGif allows you to record a selected area of your screen, edit and save it as a gif or video.

  Language:C#23.4k2.2k

• secabstraction/PowerWalker

  Language:PowerShell217

• mattifestation/WindowsEventLogMetadata

  Event metadata collected across all manifest-based ETW providers on Window 10 1903

  302

• akahn16/McAfee-ePO-PowerShell-API

  Interact with McAfee ePO with PowerShell!

  Language:PowerShell5

• marcosd4h/sysmonx

  SysmonX - An Augmented Drop-In Replacement of Sysmon

  Language:C++20749

• vavarachen/evtx2json

  A tool to convert Windows evtx files (Windows Event Log Files) into JSON format and log to Splunk (optional) using HTTP Event Collector.

  Language:Python5212

• nshalabi/SysmonTools

  Utilities for Sysmon

  1.5k205

• darkoperator/Posh-VirusTotal

  PowerShell Module to interact with VirusTotal

  Language:PowerShell11530