M365/Azure adversary simulation tool that generates realistic attack telemetry to help blue teams improve their detection and response capabilities.

BadZure orchestrates the setup of Azure AD tenants, populating them with diverse entities while also introducing common security misconfigurations to create vulnerable tenants with multiple attack …

Resource links (video, slides & code) for my conference talks | presentations | workshops

PurpleSharp is a C# adversary simulation tool that executes adversary techniques with the purpose of generating attack telemetry in monitored Windows environments

SharpShareFinder is a minimalistic network share discovery POC designed to enumerate shares in Windows Active Directory networks leveraging .NET parallelism.

Active Directory Purple Team Playbook

attack2jira automates the process of standing up a Jira environment that can be used to track and measure ATT&CK coverage

Command & Control Implant Simulator

Writing custom backdoor payloads with C# - Defcon 27 Workshop

Oriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The results are presented in a Web layer to help defenders iden…

Validates username & password combination(s) across a host or group of hosts using the SMB protocol.

PurpleSpray is an adversary simulation tool that executes password spray behavior under different scenarios and conditions with the purpose of generating attack telemetry in properly monitored Wind…