Cybersecurity Blue Team
234 items from fabacab/awesome-cybersecurity-blueteam ★5,601
-
MozDef github.com
Automates the security incident handling process and facilitate the real-time activities of incident handlers.
-
chopshop github.com
is a MITRE developed framework to aid analysts in the creation and execution of pynids based decoders and detectors of APT tradecraft.
-
ir-rescue github.com
ir-rescue is a Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
-
Endlessh github.com
-
OSX Collector github.com
OSX Auditor offshoot for live response.
-
Scout Suite github.com
-
Arkime github.com
-
Viper github.com
Python based binary analysis and management framework, that works well with Cuckoo and YARA.
-
PowerForensics github.com
Live disk forensics platform, using PowerShell.
-
Network Flight Simulator github.com
Lightweight utility used to generate malicious network traffic and help security teams to evaluate security controls and network visibility.
-
RedHunt-OS github.com
Virtual machine for adversary emulation and threat hunting.
-
Metta github.com
Information security preparedness tool to do adversarial simulation.
-
Santa github.com
-
DumpsterFire github.com
Modular, menu-driven, cross-platform tool for building repeatable, time-delayed, distributed security events. Easily create custom event chains for Blue Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale…
-
ssh-audit github.com
-
ThreatIngestor github.com
-
Notary github.com
-
VAST github.com
Open source security data pipeline engine for structured event data, supporting high-volume telemetry ingestion, compaction, and retrieval; purpose-built for security content execution, guided threat hunting, and large-scale investigation.
-
HardenTools github.com
-
OneFuzz github.com
-
CimSweep github.com
Suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
-
Combine github.com
-
FireEye's Red Team Tool Countermeasures github.com
-
MultiScanner github.com
-
King Phisher github.com
-
DeepBlueCLI github.com
-
CanaryTokens github.com
-
PSRecon github.com
PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over…
-
helm-secrets github.com
-
ESET's Malware IoCs github.com
-
Vault vaultproject.io
An encrypted datastore secure enough to hold environment and application secrets.
-
Snyk snyk.io
A developer security platform that integrates directly into development tools, workflows, and automation pipelines.
-
Valgrind valgrind.org
A tool for memory debugging, memory leak detection, and profiling.
-
Wireshark wireshark.org
The world’s foremost and widely-used network protocol analyzer.
-
threat_note github.com
Lightweight investigation notebook that allows security researchers the ability to register and retrieve indicators related to their research.
-
phishing_catcher github.com
-
Gatekeeper github.com
-
Windows Secure Host Baseline github.com
-
Principal Mapper (PMapper) github.com
-
AllStar github.com
-
PlumHound github.com
-
libcrafter github.com
is a high level library for C++ designed to make easier the creation and decoding of network packets. It is able to craft or decode packets of most common network protocols, send them on the wire, capture them and match requests and replies.
-
Clevis github.com
-
Bane github.com
-
CertSpotter github.com
-
Margarita Shotgun github.com
Command line utility (that works with or without Amazon EC2 instances) to parallelize remote memory acquisition.
-
GRASSMARLIN github.com
-
kubernetes-event-exporter github.com
-
Vanguards github.com
This addon protects against guard discovery and related traffic analysis attacks.
-
Artillery github.com
- next page of items loading…
