TTPRunner. Run TTPs, with AI!
139ConstructingDefenseLab. Ludus range for the Constructing Defense Lab
130DockerDetectionNotes. Some of my rough notes for Docker threat detection
51SysmonConfigPusher2. Sysmon Config Pusher - Modernized
41SANSTHS2021. Hunting Malicious Macros SANS Threathunting Summit 2021 Materials
39fishbowl. Containerized credential auditing perimeter for AI coding agents. Wraps Codex/Claude Code in Docker, audits every credential access via eBPF.
9BTV30. Blue Team Village 30 Talk Materials
5random.
1BSides2019.
1LinuxVisibilityContainer. An Ubuntu container with Sysmon for Linux Configured
1