casimkhan Goto Github PK

amazon-kinesis-replay

A Java application that replays events that are stored in objects in Amazon S3 into a Amazon Kinesis stream as if they occurred in real time.

apt_digital_weapon

Indicators of compromise (IOCs) collected from public resources and categorized by Qi-AnXin.

aptsimulator

A toolset to make a system look as if it was the victim of an APT attack

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

attack_range

A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk

auto_deploy

Automated Deployment of Detective Controls

aws-iam-privilege-escalation

A centralized source of all AWS IAM privilege escalation methods released by Rhino Security Labs.

blue-teaming-with-kql

Repository with Sample KQL Query examples for Threat Hunting

cirtkit

Tools for the Computer Incident Response Team :computer:

cloudmapper

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

cyberchef-recipes

A list of cyber-chef recipes and curated links

cyberthreathunting

A collection of resources for Threat Hunters

detection-as-code

An example of how to deploy a Detection as Code pipeline using Sigma Rules, Sigmac, Gitlab CI, and Splunk.

dettect

Detect Tactics, Techniques & Combat Threats

dfirmindmaps

A repository of DFIR-related Mind Maps geared towards the visual learners!

email-header-analyzer

E-Mail Header Analyzer

eml_analyzer

EML analyzer is an application to analyze the EML file

eml_parser

python eml parser module

eventlist

EventList

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

fatt

FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic

flare-fakenet-ng

FakeNet-NG - Next Generation Dynamic Network Analysis Tool

flare-vm

gcp

GCP cloud

gene

Signature Engine for Windows Event Logs

golang-evtx

goprocmon

hxtool

HXTool is an extended user interface for the FireEye HX Endpoint product. HXTool can be installed on a dedicated server or on your physical workstation. HXTool provides additional features and capabilities over the standard FireEye HX web user interface. HXTool uses the fully documented REST API that comes with the FireEye HX for communication with the HX environment.

info

Public Landing Page