guerreroag12

guerreroag12's Stars

• A-poc/RedTeam-Tools

  Tools and Techniques for Red Team / Penetration Testing

  6.1k830

• tsale/EDR-Telemetry

  This project aims to compare and evaluate the telemetry of various EDR products.

  Language:Python1.7k158

• haxxm0nkey/azhunt

  Azure AD (Entra ID) enumeration tool. Find related domains and tenant information in a simple way.

  Language:Go30

• vectra-ai-research/Halberd

  Halberd : Multi-Cloud Attack Tool

  Language:Python21818

• PaperMtn/slack-watchman

  Slack enumeration and exposed secrets detection tool

  Language:Python36639

• A-poc/BlueTeam-Tools

  Tools and Techniques for Blue Team / Incident Response

  2.8k439

• mrwadams/stride-gpt

  An AI-powered threat modeling tool that leverages OpenAI's GPT models to generate threat models for a given application based on the STRIDE methodology.

  Language:Python495155

• BushidoUK/Ransomware-Tool-Matrix

  A resource containing all the tools each ransomware gangs uses

  76887

• Abjuri5t/IOC-Cartographer_TLP-CLEAR

  Language:Python82

• PacktPublishing/Automating-Security-Detection-Engineering

  Automating Security Detection Engineering, published by Packt

  Language:Python479

• shauntdergrigorian/splunkqueries

  A list of Splunk queries that I've collected and used over time.

  7317

• DavidWells/markdown-magic

  💫  Automatically format markdown files via comment blocks using source code, external data & custom transforms.

  Language:JavaScript821227

• palantir/osquery-configuration

  A repository for using osquery for incident detection and response

  829121

• wealthsimple/odef

  This is a public template repository for the Open Detection Engineering Framework

  Language:Python235

• poona/exercises-malware-analysis-and-detection-engineering

  Holds the exercise samples used in the book "Malware Analysis and Detection Engineering" - https://www.amazon.com/dp/1484261925

  65

• invictus-ir/aws-cheatsheet

  A cheatsheet containing AWS CloudTrail events that can be used for Incident Response purposes or Detection Engineering.

  6213

• 0x4D31/detection-and-response-pipeline

  ✨ A compilation of suggested tools/services for each component in a detection and response pipeline, along with real-world examples. The purpose is to create a reference hub for designing effective threat detection and response pipelines. 👷 🏗

  26023

• bgenev/impulse-xdr

  Fully automated host & network intrusion detection platform. Detects malware from behavioural patterns rather than signatures and enables deeper visibility than legacy tools.

  Language:Python1246

• splunk/attack_data

  A repository of curated datasets from various attacks

  Language:Python59095

• splunk/docker-splunk

  Splunk Docker GitHub Repository

  Language:Python473258

• ARPSyndicate/puncia

  The Panthera(P.)uncia of Cybersecurity - Official CLI utility for Subdomain Center & Exploit Observer.

  Language:Python64430

• SigmaHQ/pySigma

  Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)

  Language:Python402103

• 0x4D31/awesome-threat-detection

  ✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️

  3.9k661

• LearningKijo/SecurityResearcher-Note

  Cover various security approaches to attack techniques and also provides new discoveries about security breaches.

  Language:PowerShell44973

• alphasoc/flightsim

  A utility to safely generate malicious network traffic patterns and evaluate controls.

  Language:Go1.3k134

• splunk/security_content

  Splunk Security Content

  Language:Python1.3k362

• palantir/alerting-detection-strategy-framework

  A framework for developing alerting and detection strategies for incident response.

  696120

• PowerShellMafia/PowerSploit

  PowerSploit - A PowerShell Post-Exploitation Framework

  Language:PowerShell11.9k4.6k

• olafhartong/sysmon-modular

  A repository of sysmon configuration modules

  Language:PowerShell2.7k593

• SwiftOnSecurity/sysmon-config

  Sysmon configuration file template with default high-quality event tracing

  4.8k1.7k