Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

Awesome list of keywords for Threat Hunting sessions

Collection of Remote Management Monitoring tool artifacts, for assisting forensics and investigations

A collection of PowerShell modules for interacting with the Shodan API. Includes modules for returning information about the API, client IP, DNS, exploits, honeypot scores, hosts, ports, profiles, …

Malware detonation logs in ndjson format

A repository hosting example goodware evtx logs containing sample software installation and basic user interaction

Sample evtx files to use for testing hayabusa detection rules

Set of EVTX samples (>270) mapped to MITRE Att@k tactic and techniques to measure your SIEM coverage or developed new use cases.

A Fast (and safe) parser for the Windows XML Event Log (EVTX) format

Windows Events Attack Samples

Investigate malicious Windows logon by visualizing and analyzing Windows event log

Re-play Security Events

Consolidation of various resources related to Microsoft Sysmon & sample data/log

恶意软件日志合集

Merge evtx files

EvtIDs & TTPs

Windows Events Samples