Incident Response - Fast suspicious file finder
- dfir
- investigation
- incident-response
- threat-hunting
Repository Index
47,133 repositories indexed
73–96 of 110 · Most stars
Sandia Cyber Omni Tracker (SCOT)
- perl
- javascript
- cyber-security
- incident-response
Remote Memory Acquisition Tool
Collecting & Hunting for IOCs with gusto and style
- threat
- hunting
- ioc
- security-tools
Collection of malware persistence and hunting information. Be a persistent persistence hunter!
- threat-hunting
- threat-intelligence
- persistence
- malware-persistence
Suricata rules for network anomaly detection
- suricata-rule
- suricata
- ids
- nsm
Threat Intelligence Quotient Test - Dataviz and Statistical Analysis of TI feeds
Multithreaded threat Intelligence gathering built with Python3
- carbonblack
- python
- threatintel
a curated list of useful threat modeling resources
- threat-modeling
- security
- risk-assessment
Open Source Threat Intelligence Platform
- cti
- cybersecurity
- security
- intelligence
Open-source agentic security operations platform:
- agentic-security
- cyber-security
- cyber-threat-intelligence
- cybersecurity
Anvilogic Forge
- detection
- detection-engineering
- threat-hunting
- snowflake
Signature based honeypot detector tool written in Golang
- cyber-threat-intelligence
- deception-technology
- honeypot
- offen
🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit
ThreatTracker is a Python script designed to monitor and generate alerts on given sets of indicators of compromise (IOCs) indexed by a set of Google Custom Search Engines.
Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise
- detection
- splunk
- bpfdoor
- vulnerability
Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents
Modular web-application honeypot platform built using go and gin
- cti
- cyber-threat-intelligence
- golang
- honeypot
PowerGRR is an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting.
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.
- ai-security
- cybersecurity
- ids
- iot-security
Kibana 7 Templates for Suricata IDPS Threat Hunting
Advanced Phishing Protection: Suricata rulesets open and free
- anti-phishing
- antiphishing
- openphish
- phishing
Cryptographic Dataset Generation & Modelling Framework