NVISOsecurity/ansible-winlogbeat

Stars
4
Rank 3,304,323 (Top 66 %)
Language
License
MIT License
Created over 5 years ago
Updated over 5 years ago

NVISOsecurity/ansible-winlogbeat

NVISOsecurity

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Ansible role for WinLogBeat

MagiskTrustUserCerts

A Magisk/KernelSU module that automatically adds user certificates to the system root CA store

posh-dsc-windows-hardening

Windows OS Hardening with PowerShell DSC

disable-flutter-tls-verification

A Frida script that disables Flutter's TLS verification

CobaltWhispers

CobaltWhispers is an aggressor script that utilizes a collection of Beacon Object Files (BOF) for Cobalt Strike to perform process injection, persistence and more, leveraging direct syscalls (SysWhispers2) to bypass EDR/AV

ee-outliers

Open-source framework to detect outliers in Elasticsearch events

binsnitch

Detect silent (unwanted) changes to files on your system

pyCobaltHound

pyCobaltHound is an Aggressor script extension for Cobalt Strike which aims to provide a deep integration between Cobalt Strike and Bloodhound.

frida-ios-playground

An iOS app that lets you practice your Frida skills

evtx-hunter

evtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files.

Interceptor

Interceptor is a kernel driver focused on tampering with EDR/AV solutions in kernel space

brown-bags

IOXY

MQTT intercepting proxy

decompile-py2exe

Decompile py2exe Python 3 generated EXEs

DInvisibleRegistry

DInvisibleRegistry

blogposts

A repo to house files for our blogposts on blog.nviso.eu

cs2br-bof

codasm

Payload encoding utility to effectively lower payload entropy.

cyber-security-llm-agents

A collection of agents that use Large Language Models (LLMs) to perform tasks common on our day to day jobs in cyber security.

Jupyter Notebook

nviso-cti

nexus_5_bootloader_unpacker

A bootloader imgdata unpacker for Nexus 4, 5 and 7 smartphones as well as imgdata tool for Nexus 5.

FileSearcher

logalert.py

Smart piping of command output to email for alerting.

DLLoader

SEC599-Resources

SEC599

SEC599 supporting GitHub repository

VerifiedBootRPi3

Verified Boot for RPi3

cobalt-strike-notifier

YARA

Repository of YARA rules developed by NVISO

ansible-velociraptor

Ansible role for Velociraptor EDR

cloud-security-automation

PowerShell scripts used in the "Incident response in the cloud/ foggy with a ray of sunshine" conference talk

ansible-sysmon

Ansible role for sysmon

ansible-auditbeat

Ansible role for auditbeat install

ansible-thehive

Ansible role for installing The Hive & Cortex

BitSight-Automation-Tool

BitSight Automation was developed to automate certain manual procedures and extract information such as ratings, assets, findings, etc. This tool also provides the possibility to collaborate with Scheduled Tasks and cronjobs.

ansible-windowslogconfig

Ansible role for configuring Windows security logs

ansible-caldera

Ansible role for MITRE caldera

assemblyline-service-cape

Assemblyline service build for CAPE's API

ansible-elk

Ansible role for ELK stack install

assemblyline-service-python-exe-unpacker

Python exe unpacker service

ansible-covenant

Ansible role for Covenant

assemblyline-service-urlscanio

URLScan.io AL service

assemblyline-service-clamav

Assemblyline service which submits a file to ClamAV and displays the result

assemblyline-service-msg-extractor

Simple MSG extractor AssemblyLine service

ansible-nexusrepo

Ansible role for Nexus Repository OSS

assemblyline-service-steg-finder

AssemblyLine service which scans for embedded data in image using StegExpose

assemblyline-service-malware-bazaar

Assemblyline service fetching Malware Bazaar report

caldex

Caldera exportation plugin to the MITRE ATT&CK™ Navigator.

assemblyline-service-autoit-ripper

AutoIt unpacker service

assemblyline-service-unfurl

Assemblyline service parsing a submitted URL to unshorten it.

cortex.xsoar

The cortex.xsoar collection includes Ansible modules to help automate the management of Palo Alto Cortex XSOAR.