RedEye
caldera
RedEye | caldera | |
---|---|---|
7 | 16 | |
2,531 | 5,226 | |
- | 2.4% | |
10.0 | 9.1 | |
7 months ago | 8 days ago | |
TypeScript | Python | |
BSD 3-clause "New" or "Revised" License | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
RedEye
-
Can someone please help me install CISA's RedEye tool?
I want to assume that you downloaded the Linux version from this link: https://github.com/cisagov/RedEye/releases/download/v0.8.3/linux.zip
- Cisagov/RedEye: Red Team C2 Log Visualization
- New blue team
- Red Team C2 Log Visualization
- USG CISA - RedEye is a visual analytic tool supporting Red & Blue Team operations
- RedEye - a visual analytic tool supporting Red & Blue Team operations
caldera
-
SOC Malware/Detection lab
Also, for the attack emulation part you might be interested in CALDERA.
- Automated penetration testing software?
-
Endpoint Attack Simulation
Mitre made Caldera to drive this. https://github.com/mitre/caldera
- Testing an XDR solution
-
Do you know the Mitre tool "Caldera"? How can I build a plugin for it?
Did you join the Slack and ask your question there, or on the discussion forum? The CALDERA team will answer... (both links are at https://caldera.mitre.org/)
- New blue team
- Attack simulation tool based on CVE
-
Attack Chain/Exploitation Path Diagram Generation Tools?
There's also a plugin for Caldera (https://github.com/mitre/caldera) called Pathfinder (https://github.com/center-for-threat-informed-defense/caldera_pathfinder and https://www.youtube.com/watch?v=gQRWkHFRG-s) that can help.
- Malware testing service/site for our EDR Testing of SentinelOne
- Worm/ Replicating virus for demonstrating spread/lateral movement through a network.
What are some alternatives?
velociraptor - Digging Deeper....
Covenant - Covenant is a collaborative .NET C2 framework for red teamers.
auditd - Best Practice Auditd Configuration
Empire - Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
Shuffle - Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.
CTF-Difficulty - This cheasheet is aimed at the CTF Players and Beginners to help them sort the CTF Challenges on the basis of Difficulties.
robodroid-library - Curated list of Frida scripts for RoboDroid to run pre-defined behaviors.
Incident-Playbook - GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]
adversary_emulation_library - An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
Ghostwriter - The SpecterOps project management and reporting engine
AtomicPurpleTeam - Atomic Purple Team Framework and Lifecycle
WSLab - Azure Stack HCI, Windows 10 and Windows Server rapid lab deployment scripts