How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
Synthetic Adversarial Log Objects (SALO) is a framework for the generation of log events without the need for infrastructure or actions to initiate the event that causes a log event. The purpose of this framework is to allow security practitioners, data scientists, and researchers the ability to…
The main features of splunk/salo are: Adversary Simulation, Detection and Hunting Tools, Detection Frameworks.
Projects with overlapping indexed features include: redhuntlabs/redhunt-os — Virtual Machine for Adversary Emulation and Threat Hunting. cyb3rward0g/invoke-attackapi — A PowerShell script to interact with the MITRE ATT&CK Framework via its own API. its-a-feature/apfell — Apfell is a red teaming framework and command and control server designed for collaborative adversary simulation. It… cobbr/covenant — Covenant is a .NET-based command and control framework designed for red team operations and adversary simulation. It… bluscreenofjeff/red-team-infrastructure-wiki — This project is a collection of technical resources, blueprints, and guides for building resilient and stealthy red… binarydefense/beacon-fronting — A simple command line program to help defender test their detections for network beacon patterns and domain fronting.
Virtual Machine for Adversary Emulation and Threat Hunting
A PowerShell script to interact with the MITRE ATT&CK Framework via its own API
Covenant is a .NET-based command and control framework designed for red team operations and adversary simulation. It serves as a collaborative platform for coordinating security assessments, managing remote implants, and executing tasks on compromised systems through a centralized server. The project is distinguished by its dynamic payload generator, which compiles and obfuscates executable binaries and scripts on the fly to bypass detection. It further separates itself through a collaborative environment that allows multiple authenticated operators to share a synchronized state, track operat
Apfell is a red teaming framework and command and control server designed for collaborative adversary simulation. It provides a centralized infrastructure to manage remote agents and distribute tasking across multiple operating systems using a message broker for real-time synchronization. The system functions as a distributed agent orchestrator, allowing teams to coordinate complex attack chains and synchronize container data. It features a multi-platform payload manager that enables the downloading and integration of custom agents and command profiles from remote repositories. The platform