Threat Management

powershell

InQuest YARA Rules

0 (0)

A collection of YARA rules for research and hunting purposes.

DeepBlueCLI

0 (0)

A PowerShell module for threat hunting via Windows Event Logs

Hunt-Detect-Prevent

0 (0)

Lists of sources and utilities to hunt, detect, and prevent evildoers.

PSHunt

0 (0)

Powershell Threat Hunting Module for scanning remote endpoints and collecting comprehensive information.

Invoke-ATTACKAPI [DEPRECATED]

0 (0)

A PowerShell script to interact with the MITRE ATT&CK Framework via its own API using the deprecated MediaWiki API.

Windows EVTX Samples [200 EVTX examples]

0 (0)

Container of 200 Windows EVTX samples for testing detection scripts and training on DFIR.