threat-hunting

Star

Here are 8 public repositories matching this topic...

LaresLLC / SysmonConfigPusher

Star

Pushes Sysmon Configs

windows sysmon threat-hunting siem

Updated Jun 11, 2021
C#

3CORESec / S2AN

Star

S2AN - Mapper of Sigma/Suricata Rules/Signatures ➡️ MITRE ATT&CK Navigator

suricata threat-hunting threat-modeling sigma mitre-attack suricata-rules sigma-rules

Updated Dec 8, 2022
C#

AdamWhiteHat / Judge-Jury-and-Executable

Star

A file system forensics analysis scanner and threat hunting tool. Scans file systems at the MFT and OS level and stores data in SQL, SQLite or CSV. Threats and data can be probed harnessing the power and syntax of SQL.

security csharp scanner forensics antivirus threat-hunting query-language yara forensic-analysis yara-rules mft yara-scanner forensics-investigations threat-monitor forensics-level-scanning

Updated Mar 25, 2024
C#

DamonMohammadbagher / ETWNetMonv3

Star

ETWNetMonv3 is simple C# code for Monitoring TCP Network Connection via ETW & ETWProcessMon/2 is for Monitoring Process/Thread/Memory/Imageloads/TCPIP via ETW + Detection for Remote-Thread-Injection & Payload Detection by VirtualMemAlloc Events (in-memory) etc.

detection etw threat-hunting csharp-code meterpreter defensive blueteam blue-team networkmonitor tcpview etw-monitoring-threads defensivetool tcpv4

Updated Jun 6, 2023
C#

Viralmaniar / DDWPasteRecon

Star

DDWPasteRecon tool will help you identify code leak, sensitive files, plaintext passwords, password hashes. It also allow member of SOC & Blue Team to gain situational awareness of the organisation's web exposure on the pastesites. It Utilises Google's indexing of pastesites to gain targeted intelligence of the organisation. Blue & SOC teams can…