AIMOD2
EVTX-ATTACK-SAMPLES
AIMOD2 | EVTX-ATTACK-SAMPLES | |
---|---|---|
2 | 1 | |
84 | 2,126 | |
- | - | |
5.4 | 0.0 | |
8 months ago | over 1 year ago | |
HTML | HTML | |
GNU General Public License v3.0 or later | GNU General Public License v3.0 only |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
AIMOD2
- Adversarial Interception Mission Oriented Discovery and Disruption Framework, or AIMOD2, is a structured threat hunting approach to proactively identify, engage and prevent cyber threats denying or mitigating potential damage to the organization.
- AIMOD2: Adversarial Interception Mission Oriented Discovery and Disruption Framework, or AIMOD2, is a structured threat hunting approach to proactively identify, engage and prevent cyber threats denying or mitigating potential damage to the organization.
EVTX-ATTACK-SAMPLES
-
Sample firewall/SIEM logs
Samir has great repo for logs with attacks occurred in it, for Windows, MacOS and Network - https://github.com/sbousseaden/EVTX-ATTACK-SAMPLES
What are some alternatives?
securityonion - Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, and case management. It also includes other tools such as Playbook, osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.
mordor - Re-play Adversarial Techniques
reversinglabs-siem-rules - A collection of various SIEM rules relating to malware family groups.
sysmon-modular - A repository of sysmon configuration modules
EVTX-to-MITRE-Attack - Set of EVTX samples (>270) mapped to MITRE ATT&CK tactic and techniques to measure your SIEM coverage or developed new use cases.
ASH-IR-Dataset - An impulse response dataset for binaural synthesis of spatial audio systems on headphones