windows kernel event log collect

A delicious, but malicious SSL-VPN server 🌮

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flow…

ATT&CK Evaluations Library

Public sync with private azure-security-docs-pr repo

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

Aggregated AbuseIPDB blocklists with worst IPv4 & IPv6 offenders (~100% confidence)

Deploy headless browsers in Docker. Run on our cloud or bring your own. Free for non-commercial uses.

Restful Vulnerability Scanner

Free and open-source database diagrams editor, visualize and design your DB with a single query.

A web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK® framework.

Controls Assessment Specification

🚅Track development velocity

Proof of Concepts (PE, PDF...)

Descarga CSV con detalles de instituciones comprometidas

YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA

Validate the isolation posture of your container environment.

Elastic Security Labs releases

Elastic Security detection content for Endpoint

Synthetic Monitoring with Real Browsers

ESF modular ingestion tool for development and research.

macOS Endpoint Security Message Analysis Tool

JA4+ is a suite of network fingerprinting standards

JA4TScan is an active TCP server fingerprinting tool.

Tiny data-over-sound library

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Your friendly and safe CLI Copilot

repository for grace ansible role to install cylance agent