Windows access token manipulation attacks are well known and abused from an offensive perspective, but rely on an extensive body of arcane Windows security internals: logon sessions, access tokens, UAC, and network authentication protocols, such as Kerberos…

Microsoft has detected multiple 0-day exploits being used to attack on-premises versions of Microsoft Exchange Server in limited and targeted attacks. In the attacks observed, threat actors used this vulnerability to access on-premises Exchange servers, which…

While Kubernetes has many advantages, it also brings new security challenges.

Last December, we sent out a call to the community to help us shape ATT&CK for Containers as part of a Center for Threat-Informed Defense…

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware. - nomi-sec/PoC-in-GitHub

本文是我在探索和学习ATT&CK框架过程中，搭建本地实验环境的粗略过程，和尝试复现ATT&CK Evaluations中APT29的评估过程。

Downloads the netinstall or the live iso by torrent, http or ftp

Detect Tactics, Techniques & Combat Threats. Contribute to rabobank-cdc/DeTTECT development by creating an account on GitHub.

Exchange Server support tools and scripts. Contribute to microsoft/CSS-Exchange development by creating an account on GitHub.

How is attack&defence simulation automation done? Verify and control your Security and SOC teams 24/7. This attack was previously blocked…

Cobalt Strike servers 192.151.234.160 - 192.151.234.190 - Cobalt Strike servers 192.151.234.160 - 192.151.234.190

A tool to scan Kubernetes cluster for risky permissions - cyberark/KubiScan

Cyber attacks are phased progressions towards strategic objectives. Learn how to raise cyber resilience with the Unified Kill Chain.

Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language). - Cyb3r-Monk/Threat-Hunting-and-Detection