MISP (core software) - Open Source Threat Intelligence and Sharing Platform
- misp
- threat-sharing
- threat-hunting
- threatintel
Repository Index
47,133 repositories indexed
1–24 of 34 · Most stars
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
- phishing
- typosquatting
- domains
- dns
Sysmon configuration file template with default high-quality event tracing
- sysmon
- threatintel
- threat-hunting
- sysinternals
A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
- threat-hunting
- sysmon
- hunting-campaigns
- hypothesis
The Hunting ELK
- hunting
- elasticsearch
- kibana
- logstash
Rapidly Search and Hunt through Windows Forensic Artefacts
- attack
- rust
- security
- threat-hunting
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
A repository of sysmon configuration modules
- sysmon
- dfir
- threat-hunting
- mitre-attack
The repository host gives no description.
- threat-detection
- threat-hunting
Windows Events Attack Samples
- threat-hunting
- evtx
- windows-security
- mitre-attack
Security sensor for realtime threat detection and protection
Your Everyday Threat Intelligence
- infosec
- threatintel
- threat-sharing
- threat-hunting
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
- threat-hunting
- purpleteam
- python3
- windows-eventlog
Extract and aggregate threat intelligence.
- ioc
- indicators-of-compromise
- threatintel
- threat-intelligence
Scirius is a web application for Suricata ruleset management and threat hunting.
- python
- security
- management
- interface
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- beacons
- blue-team
- c2
- command-and-control
CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
- threat
- hunt
- red
- blue
A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public
- hacking-tools
- bash
- git-dumper
- pentesting
Splunk code (SPL) for serious threat hunters and detection engineers.
- splunk
- threat-hunting
- use-case
- siem
Incident Response - Fast suspicious file finder
- dfir
- investigation
- incident-response
- threat-hunting
THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTING , OSINT , AND ETHICAL HACKING
- ai-bug-bounty
- ai-bug-finder
- ai-bug-reporter
- ai-hacking