Pinned Repositories
CobaltStrikeParser
grab_beacon_config
TheThreatHuntLibrary
Library of threat hunts to get any user started!
velociraptor-detections
svch0stz's Repositories
svch0stz/TheThreatHuntLibrary
Library of threat hunts to get any user started!
svch0stz/velociraptor-detections
svch0stz/grab_beacon_config
svch0stz/CobaltStrikeParser
svch0stz/Abused-Legitimate-Services
Cloud, CDN, and marketing services leveraged by cybercriminals and APT groups
svch0stz/AllthingsTimesketch
svch0stz/commons
A Collection of Python Utilities and Libraries I have developed to achieve common tasks which I use.
svch0stz/HELK
The Hunting ELK
svch0stz/mordor
Re-play Adversarial Techniques
svch0stz/Azure
Azure AD Scripts
svch0stz/Beta
Beta versions of my software
svch0stz/CVE-2022-22947
poc for CVE-2022-22947
svch0stz/detection
Detection in the form of Yara, Snort and ClamAV signatures.
svch0stz/DetectRaptor
A repository to share publicly available Velociraptor detection content
svch0stz/go-recyclebin
Go parser for $I files in $Recycle.bin
svch0stz/Grafiki
Threat Hunting tool about Sysmon and graphs
svch0stz/KapeFiles
This repository serves as a place for community created Targets and Modules for use with KAPE.
svch0stz/lateral_movement_graph
svch0stz/Microsoft-Analyzer-Suite
A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID
svch0stz/RECmd
Command line access to the Registry
svch0stz/sigma
Generic Signature Format for SIEM Systems
svch0stz/signature-base
Signature base for my scanner tools
svch0stz/SQLiteHunter
Hunt for SQLite files used by various applications
svch0stz/sysmon-config
Sysmon configuration file template with default high-quality event tracing
svch0stz/ThreatIngestor
Extract and aggregate threat intelligence.
svch0stz/velociraptor
Digging Deeper....
svch0stz/velociraptor-docs
Documentation site for Velociraptor
svch0stz/velociraptor-to-timesketch
svch0stz/VM-Packages
svch0stz/Zircolite
A standalone SIGMA-based detection tool for EVTX.