A repository of sysmon configuration modules
-
Updated
Aug 21, 2024 - PowerShell
#
mitre-attack
Here are 16 public repositories matching this topic...
Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events.
graylog logging forensics dfir sysmon threat-hunting siem threat-sharing threatintel netsec sysinternals graylog-plugin forensic-analysis threat-analysis threat-intelligence humio mitre-attack sigma-rules forensicartifacts digitalforensics
-
Updated
Nov 5, 2023 - PowerShell
A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework
-
Updated
Nov 3, 2020 - PowerShell
A PowerShell-based toolkit and framework consisting of a collection of techniques and tradecraft for use in red team, post-exploitation, adversary simulation, or other offensive security tasks.
-
Updated
Apr 29, 2020 - PowerShell
Purpleteam scripts simulation & Detection - trigger events for SOC detections
windows linux security ioc awesome simulation detection tactics awesome-list threat-hunting siem soc techniques blueteam redteam mitre-attack purpleteam threathunting offensive-scripts detection-engineering
-
Updated
Dec 20, 2024 - PowerShell
PowerShell Post-exploitation agent based on Mitre Att&ck framework
-
Updated
Feb 1, 2023 - PowerShell
STI ISE 5901 Whitepaper repository
-
Updated
Oct 1, 2021 - PowerShell
Windows network host hunting at scale!
-
Updated
Oct 29, 2024 - PowerShell
Presentations
-
Updated
Feb 9, 2024 - PowerShell
Small and highly portable detection tests based on MITRE's ATT&CK.
-
Updated
Aug 3, 2018 - PowerShell
GitHub Action for local execution of Atomic Red Team tests using Invoke-Atomic
-
Updated
Jan 4, 2025 - PowerShell
Small and highly portable detection tests based on MITRE's ATT&CK.
-
Updated
May 8, 2021 - PowerShell
A repository of sysmon configuration modules
-
Updated
Jul 2, 2022 - PowerShell
Improve this page
Add a description, image, and links to the mitre-attack topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the mitre-attack topic, visit your repo's landing page and select "manage topics."