grayfold3d

KapeFiles

This repository serves as a place for community created Targets and Modules for use with KAPE.

DeepBlueCLI

EDR-Testing-Script

Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-CradleCrafter payloads

evtx

C# based evtx parser with lots of extras

Get-KapeModuleBinaries

Parses KAPE module files and downloads binaries referenced by BinaryURL

KapeFiles

This repository serves as a place for community created Targets and Modules for use with KAPE.

POSH-Triage

Tools for parsing Forensic images

PowerShell

A series of scripts

PSCrowdstrike

A PowerShell wrapper around Crowdstrike API

Start-SysmonInstall

Automate Sysmon install using @swiftonsecurity config

grayfold3d/POSH-Triage

Tools for parsing Forensic images

grayfold3d/Get-KapeModuleBinaries

Parses KAPE module files and downloads binaries referenced by BinaryURL

grayfold3d/PSCrowdstrike

A PowerShell wrapper around Crowdstrike API

grayfold3d/PowerShell

A series of scripts

grayfold3d/DeepBlueCLI

grayfold3d/EDR-Testing-Script

Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-CradleCrafter payloads

grayfold3d/evtx

C# based evtx parser with lots of extras

grayfold3d/KapeFiles

This repository serves as a place for community created Targets and Modules for use with KAPE.

grayfold3d/Start-SysmonInstall

Automate Sysmon install using @swiftonsecurity config