CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
Repository Index
47,133 repositories indexed
25–45 of 45 · Most stars
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
- xss
- bxss
- security
- bugbounty
Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
- threat
- hunt
- red
- blue
A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public
- hacking-tools
- bash
- git-dumper
- pentesting
Splunk code (SPL) for serious threat hunters and detection engineers.
- splunk
- threat-hunting
- use-case
- siem
Incident Response - Fast suspicious file finder
- dfir
- investigation
- incident-response
- threat-hunting
THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTING , OSINT , AND ETHICAL HACKING
- ai-bug-bounty
- ai-bug-finder
- ai-bug-reporter
- ai-hacking
Collecting & Hunting for IOCs with gusto and style
- threat
- hunting
- ioc
- security-tools
Suricata rules for network anomaly detection
- suricata-rule
- suricata
- ids
- nsm
The repository host gives no description.
Anvilogic Forge
- detection
- detection-engineering
- threat-hunting
- snowflake
Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise
- detection
- splunk
- bpfdoor
- vulnerability
Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents
Distributed Honeypot
- distributed
- honeypot
- deception
- security
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation, and SIEM validation.
High-performance network library for D programming language, event-driven asynchonous implemention(IOCP / kqueue / epoll).
Sigma Queries turned into KQL for Defender using pysigma - Automated
- detection-engineering
- kql
- microsoftsentinel
- mitre-attack
TerraSigma - Modern Detection Engineering for the Cloud-Native SIEM Microsoft Sentinel
- cybersecurity
- detection-engineering
- devops
- kql
Advanced eBPF-driven Digital Forensics and Incident Response (DFIR) framework for live Golang malware analysis, threat hunting, and observability.