Loki - Simple IOC and Incident Response Scanner

A toolset to make a system look as if it was the victim of an APT attack

OneDrive service/DLL for Sync State

Removing people from complex backgrounds in real time using TensorFlow.js in the web browser

A collection of Splunk's Search Processing Language (SPL) for Threat Hunting with CrowdStrike Falcon

attack2jira automates the process of standing up a Jira environment that can be used to track and measure ATT&CK coverage

Oriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The results are presented in a Web layer to help defenders iden…

A threat hunting tool designed to help in identifying unknown binaries across windows domain.

Exchange Transport rules to detect and enable response to phishing

Configuration guidance for implementing the Windows 10 and Windows Server 2016 DoD Secure Host Baseline settings. #nsacyber

A collection of example custom components for Home Assistant

A curated list of Awesome Threat Intelligence resources

Snapshot, patch, health-check, and potentially roll-back Windows VMs

Tools to support converting a Python project into a standalone native application.