HELK. The Hunting ELK
3.9kInvoke-ATTACKAPI. A PowerShell script to interact with the MITRE ATT&CK Framework via its own API
370floki. Agentic Workflows Made Simple
163IntelRAGU. Intel Retrieval Augmented Generation (RAG) Utilities
91log4jshell-lab. Java
71WinRpcFunctions. PowerShell
68CyberWardogLab. A few scripts I put together for testing purposes and to automate a few capabilities while doing IR. These scripts are also part of my blog https://cyberwardog.blogspot.com/
54presentations. Presentation Slides and Video links
32docker-pupy. Docker setup for Pupy
28docker-caldera. Docker Container to deploy Mitre Caldera Automated Adversary Emulation System
26infosec-well-done. A few quick recipes for those that do not have much time during the day
22azure-loganalytics-api-clients. A few scripts I put together to send and receive data from an Azure Log Analytics workspace leveraging the Azure Monitor HTTP Data Collector API
22agent-jupyter-toolkit. Jupyter Tools for AI Agents
22HF-Agents-Course-Notes. My Notes from Hugging Face AI Agents Course
20ATTACK-Python-Client. Python Script to access ATT&CK content available in STIX via a public TAXII server
13docker-poshc2. PoshC2 Framework
11demos. Multiple demos created from several projects I am currently working on
7SnorlaxSvc. A service that just sleeps.
7PoshGremlin. PowerShell module to expose Gremlin.NET
6infosec-jupyterthon. A community event for security researchers to share their favorite notebooks
4dapr-agents. Build autonomous, resilient and observable AI agents with built-in workflow orchestration, security, statefulness and telemetry.
3PwshAzContainer. C#
2dapr-agents-openapi-example. Jupyter Notebook
1PwshAzCosmosDB. A PowerShell module to manage documents on an Azure CosmosDB Database
1