#blueteam (30 Repositories)
Ranked open-source repositories tagged with #blueteam, scored by pull request acceptance likelihood and maintainer engagement velocity.
20.2%
11.1h
30 repositories tagged #blueteam
yaklang/yakit
Cyber Security ALL-IN-ONE Platform
laramies/theHarvester
E-mails, subdomains and names Harvester - OSINT
WithSecureOpenSource/chainsaw
Rapidly Search and Hunt through Windows Forensic Artefacts
PaperMtn/slack-watchman
Slack enumeration and exposed secrets detection tool
WADComs/WADComs.github.io
WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and their respective commands, to be used against Windows/AD environments.
FunnyWolf/agentic-soc-platform
Agentic SOC Platform: A powerful, flexible, open-source, and agent-centric automated security operations platform (AI SOC)
enomothem/Whoamifuck
用于Linux应急响应，快速排查异常用户登录情况和入侵信息排查，准确定位溯源时间线，高效辅助还原攻击链。
Idov31/EtwSuite
Windows native ETW inspection suite for browsing providers, reading metadata, consuming live events, recording ETL traces, filtering results, and inspecting ETL/JSON/CSV recordings from one desktop tool.
ifritnoises/sara
RouterOS Security Assessment Toolkit
DamonMohammadbagher/ETWProcessMon2
ETWProcessMon2 is for Monitoring Process/Thread/Memory/Imageloads/TCPIP via ETW + Detection for Remote-Thread-Injection & Payload Detection by VirtualMemAlloc Events (in-memory) etc.
Bert-JanP/Hunting-Queries-Detection-Rules
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
redeye-framework/Redeye
Redeye is a tool intended to help you manage your data during a pentest operation
cyberark/RPCMon
RPC Monitor tool based on Event Tracing for Windows
mthcht/Purpleteam
Purpleteam scripts simulation & Detection - trigger events for SOC detections
samratashok/Deploy-Deception
A PowerShell module to deploy active directory decoy objects.
bb1nfosec/Information-Security-Tasks
This repository is created only for infosec professionals whom work day to day basis to equip ourself with uptodate skillset, We can daily contribute daily one hour for day to day tasks and work on problem statements daily, Please contribute by providing problem statements and solutions
idnahacks/GoodHound
Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.
hevnsnt/Awesome_Incident_Response
Awesome Incident Response
opsdisk/the_cyber_plumbers_handbook
Free copy of The Cyber Plumber's Handbook - The definitive guide to Secure Shell (SSH) tunneling, port redirection, and bending traffic like a boss.
api0cradle/UltimateAppLockerByPassList
The goal of this repository is to document the most common techniques to bypass AppLocker.
scipag/HardeningKitty
HardeningKitty - Checks and hardens your Windows configuration
0xDanielLopez/TweetFeed
TweetFeed collects Indicators of Compromise (IOCs) shared by the infosec community at Twitter. Here you will find malicious URLs, domains, IPs, and SHA256/MD5 hashes.
mthcht/awesome-lists
Awesome Security lists for SOC/CERT/CTI
bluecapesecurity/PWF
Practical Windows Forensics Training
LOLBAS-Project/LOLBAS
Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
snooppr/snoop
Snoop — инструмент разведки на основе открытых данных (OSINT world)
mthcht/ThreatHunting-Keywords
Awesome list of keywords and artifacts for Threat Hunting sessions
0x6d69636b/windows_hardening
HardeningKitty and Windows Hardening Settings
scythe-io/purple-team-exercise-framework
Purple Team Exercise Framework
caster0x00/Sara
MikroTik RouterOS Security Inspector