How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
Synthetic Adversarial Log Objects (SALO) is a framework for the generation of log events without the need for infrastructure or actions to initiate the event that causes a log event. The purpose of this framework is to allow security practitioners, data scientists, and researchers the ability to…
The main features of splunk/salo are: Adversary Simulation, Detection and Hunting Tools, Detection Frameworks.
Open-source alternatives to splunk/salo include: redhuntlabs/redhunt-os — Virtual Machine for Adversary Emulation and Threat Hunting. cyb3rward0g/invoke-attackapi. its-a-feature/apfell — Apfell is a red teaming framework and command and control server designed for collaborative adversary simulation. It… cobbr/covenant — Covenant is a .NET-based command and control framework designed for red team operations and adversary simulation. It… bluscreenofjeff/red-team-infrastructure-wiki — This project is a collection of technical resources, blueprints, and guides for building resilient and stealthy red… binarydefense/beacon-fronting.
Virtual Machine for Adversary Emulation and Threat Hunting
Covenant is a .NET-based command and control framework designed for red team operations and adversary simulation. It serves as a collaborative platform for coordinating security assessments, managing remote implants, and executing tasks on compromised systems through a centralized server. The project is distinguished by its dynamic payload generator, which compiles and obfuscates executable binaries and scripts on the fly to bypass detection. It further separates itself through a collaborative environment that allows multiple authenticated operators to share a synchronized state, track operat
Apfell is a red teaming framework and command and control server designed for collaborative adversary simulation. It provides a centralized infrastructure to manage remote agents and distribute tasking across multiple operating systems using a message broker for real-time synchronization. The system functions as a distributed agent orchestrator, allowing teams to coordinate complex attack chains and synchronize container data. It features a multi-platform payload manager that enables the downloading and integration of custom agents and command profiles from remote repositories. The platform