TTPRunner. Run TTPs, with AI!
140ConstructingDefenseLab. Ludus range for the Constructing Defense Lab
134DockerDetectionNotes. Some of my rough notes for Docker threat detection
51SysmonConfigPusher2. Sysmon Config Pusher - Modernized
45SANSTHS2021. Hunting Malicious Macros SANS Threathunting Summit 2021 Materials
39fishbowl. Containerized credential auditing perimeter for AI coding agents. Wraps Codex/Claude Code in Docker, audits every credential access via eBPF.
9BTV30. Blue Team Village 30 Talk Materials
5random.
1BSides2019.
1LinuxVisibilityContainer. An Ubuntu container with Sysmon for Linux Configured
1aten. Always-on, cross-platform telemetry daemon for AI agent activity. Sysmon for AI agents.
1