yoda-sec

atomic-red-team

Small and highly portable detection tests.

atomic-threat-coverage

Automatically generated knowledge base of analytics designed to cover threats based on MITRE's ATT&CK.

auditd-attack

A Linux Auditd rule set mapped to MITRE's Attack Framework

AutoRDPwn

The Shadow Attack Framework

botsv1

elasticsplunk

A Search command to explore Elasticsearch data within Splunk.

OSCPRepo

A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' Keepnote. Reconscan in scripts folder.

osquery-attck

Mapping the MITRE ATT&CK Matrix with Osquery

rock

Automated deployment scripts for the ROCK NSM network hunting distribution.

SA-cim_vladiator

Data validator agains Splunk Common Information Model (CIM)

yoda-sec/atomic-red-team

Small and highly portable detection tests.

yoda-sec/atomic-threat-coverage

Automatically generated knowledge base of analytics designed to cover threats based on MITRE's ATT&CK.

yoda-sec/auditd-attack

A Linux Auditd rule set mapped to MITRE's Attack Framework

yoda-sec/AutoRDPwn

The Shadow Attack Framework

yoda-sec/botsv1

yoda-sec/elasticsplunk

A Search command to explore Elasticsearch data within Splunk.

yoda-sec/OSCPRepo

A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' Keepnote. Reconscan in scripts folder.

yoda-sec/osquery-attck

Mapping the MITRE ATT&CK Matrix with Osquery

yoda-sec/rock

Automated deployment scripts for the ROCK NSM network hunting distribution.

yoda-sec/SA-cim_vladiator

Data validator agains Splunk Common Information Model (CIM)

yoda-sec/sysmon-modular

A repository of sysmon configuration modules

yoda-sec/wazuh-api

OSSEC Wazuh RESTful API