OSINT

164 bookmarks
Newest
HijackLibs
HijackLibs
HijackLibs provides an curated list of DLL Hijacking candidates mappings between DLLs and vulnerable executables with additional metadata for more context For defenders this project can provide valuable information when trying to detect DLL Hijacking attempts for red teamers this project can help identify DLLs that can be used to achieve DLL Hijacking
·hijacklibs.net·
HijackLibs
EchoTrail
EchoTrail
Endpoint Behavioral Insights for Security Analysts and IT Professionals Search our Insights database for filenames and hashes to see how Windows processes behave in the wild
·echotrail.io·
EchoTrail
DeepBlueCLI PowerShell Module for Threat Hunting Security Investigation
DeepBlueCLI PowerShell Module for Threat Hunting Security Investigation
DeepBlueCLI is an opensource framework that automatically parses Windows event logs either on Windows PowerShell version or now on ELK Elasticsearch Working with DeepBlueCLI DeepBluCLI is available in Github PowerShell must be run as Administrator and Please read the SetExecutionPolicy For a simple Process local Windows security event log You will definitely receive a running
·socinvestigation.com·
DeepBlueCLI PowerShell Module for Threat Hunting Security Investigation