Maxime Thiebaut

sigmai. Import specific data sources into the Sigma generic and open signature format.

PCAPeek. A proof-of-concept re-assembler for reverse VNC traffic.

Signatures. 🚧 Currently transfering TLP:CLEAR rules from TLP:AMBER repository...

dnsbeat. An Elasticsearch Beat to monitor DNS zones through customizable zone transfers.

mdeproxy. Microsoft Defender for Endpoint Proxy (Device Timeline, ...)

AdaptixC2-gopher. Uses brute force to locate the configuration within an AdaptixC2's gopher agent.

IDA. ⚙️ Things I used in IDA...

dnsbeat-poc. A proof-of-concept for 0xThiebaut/dnsbeat.

ctfd-koth. A CTFd King of the Hill binary.

Zipit. A Firefox extension to encrypt files downloaded through Microsoft 365 Defender's Live Response Sessions.