Pinned Loading

1. ProcessAnomalyCheck ProcessAnomalyCheck Public

   Volatility 3 plugin that checks the parent process and execution path of critical Windows processes for anomalies.

   Python 1

2. Recon-AD Recon-AD Public

   Forked from outflanknl/Recon-AD

   Recon-AD, an AD recon tool based on ADSI and reflective DLL’s

   C++

3. DetectRaptor DetectRaptor Public

   Forked from mgreen27/DetectRaptor

   A repository to share publicly available Velociraptor detection content

   YARA 1

4. Invoke-LiveResponse Invoke-LiveResponse Public

   Forked from mgreen27/Invoke-LiveResponse

   Invoke-LiveResponse

   PowerShell

5. ThreatHunter-Playbook ThreatHunter-Playbook Public

   Forked from OTRF/ThreatHunter-Playbook

   A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.

   Python

6. Windows-Hunting Windows-Hunting Public

   Forked from beahunt3r/Windows-Hunting