Repository Index

Reusable prompts for a structured, evidence-first bug bounty hunting workflow

• application-security
• bug-bounty
• bug-bounty-hunting
• cybersecurity

Tenzir is the data pipeline engine for security teams.

• incident-response
• threathunting
• siem
• soc

Scirius is a web application for Suricata ruleset management and threat hunting.

• python
• security
• management
• interface

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

• beacons
• blue-team
• c2
• command-and-control

CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

• threat
• hunt
• red
• blue

A powerful and user-friendly browser extension that streamlines investigations for security professionals.

• browser-extension
• chrome-extension
• cybersecurity
• threat-analysis

A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public

• hacking-tools
• bash
• git-dumper
• pentesting

Splunk code (SPL) for serious threat hunters and detection engineers.

• splunk
• threat-hunting
• use-case
• siem

Incident Response - Fast suspicious file finder

• dfir
• investigation
• incident-response
• threat-hunting

THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTING , OSINT , AND ETHICAL HACKING

• ai-bug-bounty
• ai-bug-finder
• ai-bug-reporter
• ai-hacking

Collecting & Hunting for IOCs with gusto and style

• threat
• hunting
• ioc
• security-tools

Collection of malware persistence and hunting information. Be a persistent persistence hunter!

• threat-hunting
• threat-intelligence
• persistence
• malware-persistence

Suricata rules for network anomaly detection

• suricata-rule
• suricata
• ids
• nsm

Anvilogic Forge

• detection
• detection-engineering
• threat-hunting
• snowflake

Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise

• detection
• splunk
• bpfdoor
• vulnerability

Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents

• claude-code
• cti
• llm
• rag

PowerGRR is an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting.

• powershell
• powershell-module
• grr
• incident-response

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

• bpf
• ebpf
• forensics
• golang

Kibana 7 Templates for Suricata IDPS Threat Hunting

Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation, and SIEM validation.

• cybersecurity
• docker
• fastapi
• llm

Kibana 6 Templates for Suricata IDPS Threat Hunting

Sigma Queries turned into KQL for Defender using pysigma - Automated

• detection-engineering
• kql
• microsoftsentinel
• mitre-attack

TerraSigma - Modern Detection Engineering for the Cloud-Native SIEM Microsoft Sentinel

• cybersecurity
• detection-engineering
• devops
• kql