Discover op7ic/Cloud-Investigate Open Source project

Stars
36
Rank 735,472 (Top 15 %)
Language HCL
License
Other
Created over 2 years ago
Updated 8 months ago

op7ic

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

A preconfigured Windows-based system designed for rapid forensic investigations in both Azure and AWS.

EDR-Testing-Script

Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-CradleCrafter/Invoke-DOSfuscation payloads

Batchfile

285

BlueTeam.Lab

Blue Team detection lab created with Terraform and Ansible in Azure.

Jinja

135

RT-CyberShield

Protecting Red Team infrastructure with cyber shield blocking AWS/AZURE/IBM/Digital Ocean/TOR/AV IP/ETC. ranges

Shell

shadowbroker-smb-scanner

shadowbroker SMB exploit scanner. Scans for ETERNALSYNERGY ETERNALBLUE ETERNALROMANCE ETHERNALCHAMPION

Python

LeakGenerator

Generate your own personal data leak

Python

unix_collector

unix_collector is a Live Response collection script for Incident Response on UNIX-like systems using native binaries. Supports AIX, Android, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris systems artifacts.

Shell

GeoIPPlotter

GeoIP plotting script written in Python to help security teams draw visualized reports from IP addresses

Python

OS.LAB

Operating System testbed created with Terraform to test payloads, programs and compatibility on different OS versions. Supports AWS and Azure.

HCL

amphunt

Cisco AMP threat hunting scripts

Python

defcon-23-slides-only

investigatehunt

Cisco Umbrella Investigate threat hunting scripts

Python

wordpress-password-bruteforcer

simple module which will attempt to bruteforce wordpress passwords for either specific username or specific list of users and passwords.

Python

powershell-reverse-shell

Simple Powershell Reverse Shell with handling server in python

Python

WINFINGER

A collection of Windows hashes generated against windows installation ISOs using sigcheck from Sysinternals

Bad-Firewall

Bad IP blocking firewall with ipset, iptables and a dash of bash.

Shell

car-hacking-materials

various references and docs related to car hacking

windows-driver-privesc

Check windows drivers for weak permission which could lead to privilage escalation.

LokiToWinEventLog

A repository containing scripts which allow Loki to log to Windows Event Log.

PowerShell

DNS-Testing-Script

Test the accuracy of DNS monitoring and blocking solution.

PowerShell

RT-OfficeBeaconBox

Simple Office-based beacon that calls back to your server for phishing exercises.

Shell

Yara-Mixer

PowerShell scripts concatenating different Yara rules into one master rule file.

PowerShell

Pe-SieveToWinEventLog

A repository containing scripts which allow pe-sieve to log to Windows Event Log.

PowerShell

local-mysql-bruteforcer

local mysql password bruteforcer

Python

fake-http-auth-generator

Python

amp-policy-kit

Cisco Secure Endpoint policy assessment kit

Python

meraki-hunting

Threat hunting scripts for Cisco Meraki installations

Python

SHARPPENCIL

A PowerShell and C# implementation of LDAP attribute extraction for domain users

PowerShell

Invoke-DomainHasher

A threat hunting tool designed to help in identifying unknown binaries across windows domain.

PowerShell

massJARM

A threaded implemenation of JARM tool

Python

afl-fuzz-packets

AFL-minimized packet samples for fuzzing

universal-process-privesc

This simple script is a basic wrapper around windows API to elevate current process privilage. Handy for developement and common functions in python.

Python

evtxpickup

Windows AD wide windows event collection script for scaled up forensic investigations.

PowerShell

MCuban_Blog

Mark Cuban blog copy (in PDF)

Python

Codeword-Generator-Collection

Codeword generators written in common programming and scripting languages

JavaScript

op7ic/Cloud-Investigate

op7ic

Reviews

Repository Details

More Repositories