preventions,github

threatcrowd-maltego

Maltego transforms for the ThreatCrowd search API

threathunter-playbook

A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.

threatnote

threatnote.io | Cyber Threat Intelligence Notebook

threatpinchlookup

Documentation and Sharing Repository for ThreatPinch Lookup Chrome & Firefox Extension

Threat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and hunting designed for intel and malware analysts as well as threat hunters to get up and running quickly.

threatscannerapp

Threat Scanner app - built using AlienVault's OTX API.

thug

Python low-interaction honeyclient

tidos-framework

The Offensive Manual Web Application Penetration Testing Framework.

tilesets-cli

CLI for interacting with the Mapbox Tilesets API

tl-bots

A collection of source code for various botnets.

tl-trojan

A collection of source code for various RATs, Stealers, and other Trojans.

tokenplayer

Manipulating and Abusing Windows Access Tokens.

tools

tools-1

Tools to interact with APTnotes reporting/index.

traitor

Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins :arrow_up: :skull_and_crossbones:

tram

Threat Report ATT&CK™ Mapping (TRAM) is a tool to aid analyst in mapping finished reports to ATT&CK.

transacted_hollowing

Transacted Hollowing - a PE injection technique, hybrid between ProcessHollowing and ProcessDoppelgänging

trape

People tracker on the Internet: OSINT analysis and research tool by Jose Pino

tsunami-security-scanner

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.