FortiHoneypot

The unix-way web crawler

CVE Alerting Platform

Script to create MITRE ATT&CK Navigator layers from the annotated detection rules in Elastic Security (Kibana).

A toolset to make a system look as if it was the victim of an APT attack

Documentation and scripts to properly enable Windows event logs.

ThePhish: an automated phishing email analysis tool

stoQ Public Plugins

Generic Signature Format for SIEM Systems

An open source framework for enterprise level automated analysis.

Malware repository component for samples & static configuration with REST API interface.

File and analysis artifacts yara matcher for Karton framework

A Feature Rich Modular Malware Configuration Extraction Utility for MalDuck

pfSense/OPNsense + ELK

Playbooks to implement Center for Internet Security (CIS) controls for RHEL7 and RHEL8.

Install and auto update scripts for sysmon and winlogbeat

Docker Image for Lufi, it means Let's Upload that FIle. It's a E2E encrypted file sharing software.

Network Plugin for Kibana

Imports Alienvault OTX pulses to a MISP instance

This is a collection of #botnet source codes, unorganized. For EDUCATIONAL PURPOSES ONLY

Fast Incident Response

An automated adversary emulation system