purpleteam

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

The all-in-one browser extension for offensive security professionals 🛠

The goal of this repository is to document the most common techniques to bypass AppLocker.

A curated knowledge base to build, run and mature a SOC (including CSIRT).

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

Bloodhound Reporting for Blue and Purple Teams

Hunting queries and detections

Purple Team Exercise Framework

Practical Windows Forensics Training

Purple Team Resources for Enterprise Purple Teaming: An Exploratory Qualitative Study by Xena Olsen.

A little tool to play with Azure Identity - Azure and Entra ID lab creation tool. Blog: https://medium.com/@iknowjason/sentinel-for-purple-teaming-183b7df7a2f4

Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.

KslDump — Why bring your own knife when Defender already left one in the kitchen?

Slack enumeration and exposed secrets detection tool

This page is a result of the ongoing hands-on research around advanced Linux attacks, detection and forensics techniques and tools.

Atomic Purple Team Framework and Lifecycle

Diablo ~ Hacking / Pentesting & Reporting

FudgeC2 - a command and control framework designed for team collaboration and post-exploitation activities.

This tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG files to see what an attacker did on a compromised host. It is extremely u…