Lucene search
+L

1538 matches found

Kitploit
Kitploit
added 2026/09/13 6:30 a.m.6 views

agentic-threat-hunting-framework

Agentic Threat Hunting Framework ATHF Quick Start • Installation • Documentation • Examples Give your threat hunting program memory and agency. The Agentic Threat Hunting Framework ATHF is the memory and automation layer for your threat hunting program. It gives your hunts structure, persistence,...

5.9AI score
SaveExploits0References20
Kitploit
Kitploit
added 2026/09/13 5:41 a.m.11 views

sigma

Sigma - Formato Genérico de Firmas para Sistemas SIEM Bienvenido al repositorio principal de reglas Sigma. El lugar donde ingenieros de detección, cazadores de amenazas y todos los profesionales de seguridad defensiva colaboran en reglas de detección. El repositorio ofrece más de 3000 reglas de...

6AI score
SaveExploits0References20
Kitploit
Kitploit
added 2026/09/13 4:39 a.m.6 views

content-packs

Content Packs for Eventum Ready-to-use generator projects for Eventum that produce realistic synthetic events mimicking real SIEM data sources. Each generator outputs ECS-compatible JSON that can be ingested directly into Elasticsearch, OpenSearch, or any SIEM platform. Quick Start With Docker...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/13 4:33 a.m.4 views

CyberDefense-Lab

Cyber Security Lab: Blue Team Infrastructure & Network Defense This laboratory project demonstrates the creation of an integrated "Blue Team" infrastructure, focusing on centralized network security, Intrusion Detection/Prevention Systems IDS/IPS, and Security Information and Event Management SIE...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 4:25 a.m.12 views

deadair

deadair comprueba si las detecciones de SIEM habilitadas todavía disponen de la telemetría que necesitan. Informa de datos ausentes o desactualizados, retrasos de ingesta e inconsistencias de esquema. Se ejecuta localmente · Solo lectura · Sin agente · Sin envío de telemetría Lee el análisis...

5.8AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/13 4:18 a.m.6 views

MalwLess

Herramienta de Simulación MalwLess MST MalwLess es una herramienta de código abierto que permite simular compromisos del sistema o comportamientos de ataque sin ejecutar procesos o PoCs. La herramienta está diseñada para probar detecciones del Equipo Azul y reglas de correlación de SIEM...

6AI score
SaveExploits0References15
Kitploit
Kitploit
added 2026/09/13 4:17 a.m.8 views

macnoise

MacNoise MacNoise generates real macOS telemetry: network connections, file writes, process spawns, plist mutations, TCC probes, and more. Point it at a machine running your EDR, SIEM, or firewall stack and see what actually fires - not what the vendor datasheet claims will fire. For background o...

6AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/13 3:14 a.m.6 views

RedELK

RedELK The Red Team's SIEM - a tool for Red Teams for tracking and alarming about Blue Team activities as well as enhanced usability in long term operations. 1. Enhanced usability and overview for the red team operators by creating a central location where all relevant operational logs from...

5.8AI score
SaveExploits0References17
Kitploit
Kitploit
added 2026/09/13 2:19 a.m.9 views

DShield-SIEM

DShield Sensor Log Collection with Elasticsearch Introduction This is fork and a significant update from the initial publication on the ISC Storm Center website by Scott Jensen as a BACS paper and the scripts published in Github. https://github.com/fkadriver/Dshield-ELK...

5.9AI score
SaveExploits0References25
Kitploit
Kitploit
added 2026/09/13 2:05 a.m.10 views

Incident-Response-Powershell

Powershell Digital Forensics & Incident Response This repository provides PowerShell-based Incident Response scripts. DFIR Script The DFIR-Script.ps1 script collects forensic artifacts on Windows devices. Key features include: Collecting over 25 potential indicators of compromise. CSV-based expor...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/13 1:56 a.m.5 views

Nethive-Project

Nethive-Project Sistema de monitoreo de latencia baja a nula Características • Instalación • Inicio rápido • Contribuyentes • Guía de usuario El proyecto Nethive proporciona una infraestructura de gestión de eventos e información de seguridad SIEM potenciada por mediciones automáticas...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 1:52 a.m.12 views

FalconHound

FalconHound NOTA: A partir del lanzamiento de BloodHound CE 7.0, la base de datos predeterminada se ha cambiado a Postgres. Esta versión de FalconHound todavía depende de Neo4j como base de datos predeterminada. Si deseas seguir usando FalconHound mientras ejecutas la versión más reciente de...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 1:27 a.m.71 views

volana

volana moon in malagasy root@kitploit: Use it ; 🌚hide from; 🌞detected by Shell command obfuscation to avoid SIEM/detection system During pentest, an important aspect is to be stealth. For this reason you should clear your tracks after your passage. Nevertheless, many infrastructures log command a...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 1:27 a.m.8 views

volana

volana luna en malgache root@kitploit: Úsalo ; 🌚ocultar de; 🌞detectado por Ofuscación de comandos de shell para evitar SIEM/sistema de detección Durante un pentest, un aspecto importante es ser sigiloso. Por esta razón debes borrar tus huellas después de tu paso. Sin embargo, muchas...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 1:06 a.m.10 views

malwarescanner

MalwareScanner Escáner de malware muy básico por comparación de hash A veces puede ser necesario durante una respuesta a incidentes. Si encuentras archivos nuevos o sospechosos durante la respuesta, querrás verificar dónde existen esos archivos en los sistemas. Por lo tanto, es posible que...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 12:15 a.m.4 views

rustinel

Rustinel Open-source endpoint detection. Three platforms. Your rules. Run Sigma, YARA, and IOC detections on native Windows, Linux, and macOS telemetry. Written in Rust, with local alerts and no cloud account required. Bring your detection content, monitor your endpoints, and send alerts to the...

6AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/13 12:15 a.m.14 views

siemframework

SIEMS FRAMEWORK Framework de ataque modular MultiSIEM en Python3 Por ElevenPaths https://www.elevenpaths.com/ Uso: python3 ./siemsframework.py INTRODUCCIÓN Los SIEM son herramientas defensivas cada vez más utilizadas en el ámbito de la ciberseguridad, especialmente por grandes empresas y compañía...

6.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 12:12 a.m.10 views

ossec-hids

OSSEC v4.3.0 Information about OSSEC OSSEC is a full platform to monitor and control your systems. It mixes together all the aspects of HIDS host-based intrusion detection, log monitoring and SIM/SIEM together in a simple, powerful and open source solution. Visit our website for the latest...

5.9AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/13 12:01 a.m.81 views

bantam

Bantam An advanced PHP backdoor management tool, with a lightweight server footprint, multi-threaded communication, and an advanced payload generation and obfuscation tool. Features end to end encryption with request unique encryption keys, and payload streaming designed to bypass WAF, IDS, SIEM...

6.6AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/12 11:27 p.m.294 views

laurel

Linux Audit – Usable, Robust, Easy Logging LAUREL is an event post-processing plugin for auditd8 that generates useful, enriched JSON-based audit logs suitable for modern security monitoring setups. Documentation corresponding to the latest stable release can be found here. Why? TLDR: Instead of...

5.5AI score
SaveExploits0References8
Rows per page
Query Builder