Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
Repository Index
47,133 repositories indexed
49–72 of 146 · Most stars
detect stegano-hidden data in PNG & BMP
Elastic Security detection content for Endpoint
Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.
- encryption-server
- encryption
- crypto
- cryptography
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
- threat-hunting
- purpleteam
- python3
- windows-eventlog
Library and command line tool to detect SHA-1 collision in a file
ThePhish: an automated phishing email analysis tool
A utility to safely generate malicious network traffic patterns and evaluate controls.
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
- github-actions
- actions
- supply-chain-security
- hardening
A modular vulnerability scanner with automatic report generation capabilities.
- artemis
- pentesting
- security
- security-scanner
🍯 Unobtrusive and flexible spam protection for Rails apps
Free Windows Detector Software
- exeinfo
- detector
Detect deauthentication frames using an ESP8266
Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)
Extract and aggregate threat intelligence.
- ioc
- indicators-of-compromise
- threatintel
- threat-intelligence
Customizable Linux Persistence Tool for Security Research and Detection Engineering.
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
- sigma
- python3
- evtx
- sigma-rules
Use Apple FaceID or TouchID authentication in your app using BiometricAuthentication.
- authentication
- faceid
- touchid
- biometric-identification
Script to create templates to use with VirtualBox to make vm detection harder
- virtualbox
- antivm
- sandbox
- malware-analysis
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
- pentesting
- security
- chrome-extension
- api-keys
Scirius is a web application for Suricata ruleset management and threat hunting.
- python
- security
- management
- interface
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- beacons
- blue-team
- c2
- command-and-control
WinDBG Anti-RootKit Extension
- kernel-mode
- c-plus-plus
- malware
- malware-analysis