Pinned Repositories
aleph
An Open Source Malware Analysis Pipeline System
ansible
ansible-collection-hardening
This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL
ansible_for_beginners
APTnotes
Various public documents, whitepapers and articles about APT campaigns
APTSimulator
A toolset to make a system look as if it was the victim of an APT attack
atc-mitigation
Actionable analytics designed to combat threats based on MITRE's ATT&CK.
atc-react
A knowledge base of actionable Incident Response techniques
atomic-red-team
Small and highly portable detection tests based on MITRE's ATT&CK.
atomic-threat-coverage
Actionable analytics designed to combat threats
sc00tlad's Repositories
sc00tlad/aleph
An Open Source Malware Analysis Pipeline System
sc00tlad/ansible-collection-hardening
This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL
sc00tlad/APTSimulator
A toolset to make a system look as if it was the victim of an APT attack
sc00tlad/atomic-red-team
Small and highly portable detection tests based on MITRE's ATT&CK.
sc00tlad/atomic-threat-coverage
Actionable analytics designed to combat threats
sc00tlad/attack-datasources
This content is analysis and research of the data sources currently listed in ATT&CK.
sc00tlad/attack-navigator
Web app that provides basic navigation and annotation of ATT&CK matrices
sc00tlad/auditd
Best Practice Auditd Configuration
sc00tlad/awx
AWX Project
sc00tlad/caldera
Scalable Automated Adversary Emulation Platform
sc00tlad/DeepBlueCLI
sc00tlad/DetectionLab
Automate the creation of a lab environment complete with security tooling and logging best practices
sc00tlad/DeTTECT
Detect Tactics, Techniques & Combat Threats
sc00tlad/External-Pentest-Checklist
sc00tlad/hello-world
sc00tlad/LOLBAS
Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
sc00tlad/mordor
Re-play Adversarial Techniques
sc00tlad/OSSEM
Open Source Security Events Metadata (OSSEM)
sc00tlad/pyattck
A Python package to interact with the Mitre ATT&CK Framework
sc00tlad/RedTeaming-Tactics-and-Techniques
Red Teaming Tactics and Techniques
sc00tlad/security_content
Splunk Security Content
sc00tlad/sigma
Generic Signature Format for SIEM Systems
sc00tlad/SigmaUI
SIGMA UI is a free open-source application based on the Elastic stack and Sigma Converter (sigmac)
sc00tlad/signature-base
Signature base for my scanner tools
sc00tlad/Simple-DevOps-Project
sc00tlad/sysmon-modular
A repository of sysmon configuration modules
sc00tlad/ThreatHunter-Playbook
A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
sc00tlad/VECTR
VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios
sc00tlad/windows-event-forwarding
A repository for using windows event forwarding for incident detection and response
sc00tlad/windows-itpro-docs
This is used for contributions to the Windows 10 content for IT professionals on docs.microsoft.com.