Example Usage
# Monitor high network connections from a particular processID
Channel=Microsoft-Windows-Sysmon
(EventID=3 OR EventID=22)  (3=Network Connection, 22=DNS)
(DestinationHostname=*.1e100.net OR QueryName=*.gmail.com)
See also
100-redteam-projects
Free

Projects for security students…
365-Stealer
Free

365-Stealer is a phishing simualtion tool written in python3. It can be used to execute Illicit Cons…
AES-Encoder
Open Source

PowerShell Obfuscator. A PowerShell script anti-virus evasion tool…
BlueToolkit
Free

BlueToolkit is an extensible Bluetooth Classic vulnerability testing framework that helps uncover ne…
WADComs.github.io
Open Source

WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and the…
CVE_Prioritizer
Open Source

Streamline vulnerability patching with CVSS, EPSS, and CISA's Known Exploited Vulnerabilities. Prior…