Incident Response - Fast suspicious file finder
- dfir
- investigation
- incident-response
- threat-hunting
Repository Index
47,133 repositories indexed
49–72 of 79 · Most stars
Sandia Cyber Omni Tracker (SCOT)
- perl
- javascript
- cyber-security
- incident-response
Remote Memory Acquisition Tool
Collecting & Hunting for IOCs with gusto and style
- threat
- hunting
- ioc
- security-tools
Suricata rules for network anomaly detection
- suricata-rule
- suricata
- ids
- nsm
Threat Intelligence Quotient Test - Dataviz and Statistical Analysis of TI feeds
Multithreaded threat Intelligence gathering built with Python3
- carbonblack
- python
- threatintel
Open Source Threat Intelligence Platform
- cti
- cybersecurity
- security
- intelligence
Open-source agentic security operations platform:
- agentic-security
- cyber-security
- cyber-threat-intelligence
- cybersecurity
Anvilogic Forge
- detection
- detection-engineering
- threat-hunting
- snowflake
🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit
ThreatTracker is a Python script designed to monitor and generate alerts on given sets of indicators of compromise (IOCs) indexed by a set of Google Custom Search Engines.
Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise
- detection
- splunk
- bpfdoor
- vulnerability
Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents
Modular web-application honeypot platform built using go and gin
- cti
- cyber-threat-intelligence
- golang
- honeypot
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.
- ai-security
- cybersecurity
- ids
- iot-security
Advanced Phishing Protection: Suricata rulesets open and free
- anti-phishing
- antiphishing
- openphish
- phishing
Cryptographic Dataset Generation & Modelling Framework
Cumulus. Threat modeling the Clouds.
- card-game
- cornucopia
- elevation-of-privilege
- eop
A SSH Server in Go that logs username/password combos
Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation, and SIEM validation.
Prompt-injection firewall for LLM applications — 33 input detectors, 9 output scanners, federated ed25519-signed threat-intel feed. Apache 2.0, 1040 tests, F1 96.0% with 0% false positives. Docker, GitHub Action, LangChain/LlamaIndex/CrewAI integrations.
- agentic-ai
- ai-safety
- fastapi
- langchain
Threat Detection Rules (Snort/Sigma/Yara)