​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Credential Dumping #LSASS

📦 项目名称： Cloud-Native-Threat-Hunting
👤 项目作者： Spica581
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-05-24 18:23:49

📝 项目描述：
Cloud-native threat hunting case study using Splunk Cloud to detect MITRE ATT&CK T1003.001 (LSASS Memory Dumping). Features custom SPL and runtime regex (rex) log parsing of raw Sysmon telemetry to isolate credential theft.

🔗 点击访问项目地址
GitHub
GitHub - Spica581/Cloud-Native-Threat-Hunting: Cloud-native threat hunting case study using Splunk Cloud to detect MITRE ATT&CK…
Cloud-native threat hunting case study using Splunk Cloud to detect MITRE ATT&CK T1003.001 (LSASS Memory Dumping). Features custom SPL and runtime regex (rex) log parsing of raw Sysmon tele...
Credential LSASS
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Credential Dumping #LSASS #Mimikatz

📦 项目名称： Volatility3-Memory-Analysis-Playbook
👤 项目作者： ilyess-sellami
🛠 开发语言： Unknown
⭐ Star数量： 3 | 🍴 Fork数量： 0
📅 更新时间： 2026-05-18 19:01:57

📝 项目描述：
A structured DFIR playbook for analyzing memory dumps using Volatility 3. This repository provides a question-driven workflow for investigating volatile memory artifacts, suspicious processes, network connections, persistence mechanisms, credential dumping activity, and attacker behavior during incident response and CTF investigations.

🔗 点击访问项目地址
GitHub
GitHub - ilyess-sellami/Volatility3-Memory-Analysis-Playbook: A structured DFIR playbook for analyzing memory dumps using Volatility…
GitHub - ilyess-sellami/Volatility3-Memory-Analysis-Playbook: A structured DFIR playbook for analyzing memory dumps using Volatility…
A structured DFIR playbook for analyzing memory dumps using Volatility 3. This repository provides a question-driven workflow for investigating volatile memory artifacts, suspicious processes, netw...
Credential LSASS Mimikatz
 
 
Back to Top