FalconForce

Hunting queries and detections

FalconForceTeam

POC tool to convert CobaltStrike BOF files to raw shellcode

FalconForceTeam

Script to use SysWhispers2 direct system calls from Cobalt Strike BOFs

FalconForceTeam

SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Directory Web Services (ADWS) protocol.

FalconForceTeam

FalconHound is a blue team multi-tool. It allows you to utilize and enhance the power of BloodHound in a more automated fashion. It is designed to be used in conjunction with a SIEM or other log aggre...

FalconForceTeam

REST server that can analyze Kusto KQL queries against the Sentinel and Microsoft 365 Defender schemas.

FalconForceTeam