Pinned Repositories
atomic-red-team
Small and highly portable detection tests based on MITRE's ATT&CK.
Digital-Forensics-Guide
Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
EVTX-ATTACK-SAMPLES
Windows Events Samples
Hunting-Queries-Detection-Rules
Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
Incident-Playbook
GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]
LazyAdmin
SysAdmin scripts for you to use.
linWinPwn
linWinPwn is a bash script that automates a number of Active Directory Enumeration and Vulnerability checks
redteamguides.github.io
redteamguides.com
security_content
Splunk Security Content
sigma
Main Rule Repository
ruruck's Repositories
ruruck/security_content
Splunk Security Content
ruruck/sigma
Main Rule Repository
ruruck/atomic-red-team
Small and highly portable detection tests based on MITRE's ATT&CK.
ruruck/Digital-Forensics-Guide
Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
ruruck/redteamguides.github.io
redteamguides.com
ruruck/LazyAdmin
SysAdmin scripts for you to use.
ruruck/linWinPwn
linWinPwn is a bash script that automates a number of Active Directory Enumeration and Vulnerability checks
ruruck/Hunting-Queries-Detection-Rules
Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
ruruck/Incident-Playbook
GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]
ruruck/EVTX-ATTACK-SAMPLES
Windows Events Samples