This repository contains an organized collection of queries (CQL) designed to facilitate Threat Hunting tasks, incident investigation, and proactive detection of anomalous or malicious activities i…

Sanctum is an experimental proof-of-concept EDR, designed to detect modern malware techniques, above and beyond the capabilities of antivirus. Built in Rust.

PAN-OS auth bypass + RCE

Obfuscate Go builds

Detect whether a service is installed (blindly) and/or running (if exposing named pipes) on a remote machine without using local admin privileges.

A few XDR Scripts

Determine the Palo Alto PAN-OS software version of a remote GlobalProtect portal or management interface.

Iceman Fork - Proxmark3

Real Intelligence Threat Analytics - Python addon scripts