marcurdy

marcurdy's Stars

• clong/DetectionLab

  Automate the creation of a lab environment complete with security tooling and logging best practices

  Language:HTML4.6k154598984

• RhinoSecurityLabs/pacu

  The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

  Language:Python4.3k110129691

• davidprowe/BadBlood

  BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

  Language:PowerShell2k497273

• api0cradle/LOLBAS

  Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

  Language:XSLT1.6k1432341

• vitalif/grive2

  Google Drive client with support for new Drive REST API and partial sync

  Language:C++1.5k81335141

• philhagen/sof-elk

  Configuration files for the SOF-ELK VM

  Language:Shell1.5k110289276

• ahmedkhlief/APT-Hunter

  APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

  Language:Python1.2k4724237

• endgameinc/RTA

  Language:Python1.1k965211

• mattifestation/CimSweep

  CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.

  Language:PowerShell6427411148

• spender-sandbox/cuckoo-modified

  Modified edition of cuckoo

  Language:Python39372352178

• inodee/threathunting-spl

  Splunk code (SPL) for serious threat hunters and detection engineers.

  26324041

• mkorman90/VolatilityBot

  VolatilityBot – An automated memory analyzer for malware samples and memory dumps

  Language:Python26327559

• keithjjones/hostintel

  A modular Python application to collect intelligence for malicious hosts.

  Language:Python261301452

• pcbje/gransk

  Document processing for investigations

  Language:Python24921732

• toniblyx/aws-forensic-tools

  Tools for AWS forensics

  Language:Shell647015

• Kintyre/ksconf

  Kintyre's Splunk Configuration tool

  Language:Python5087313