Repository Index

Main Sigma Rule Repository

• security
• monitoring
• siem
• logging

The Hunting ELK

• hunting
• elasticsearch
• kibana
• logstash

The repository host gives no description.

• threat-detection
• threat-hunting

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

• incident-response
• malware-detection
• persistence
• powershell

Fake Protocol Server

• rdp
• ssh
• ftp
• protocols

Elastic Security detection content for Endpoint

30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)

• pypi
• monitoring-tool
• network-analysis
• malware-analysis

Web Application Honeypot

Investigate suspicious activity by visualizing Sysmon's event log

• security
• kibana
• elasticsearch
• sysmon

HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy‌ + Exploit Timing Attacks

• http2
• race-condition
• race-conditions
• scapy

A Simple Elasticsearch Honeypot

ESPot - ElasticSearch Honeypot

easy honeypot statistics