Repository Index

The Hunting ELK

• hunting
• elasticsearch
• kibana
• logstash

Rapidly Search and Hunt through Windows Forensic Artefacts

• attack
• rust
• security
• threat-hunting

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

• dfir
• threat
• hunting
• windows

🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.

• security
• password-expiration
• password
• password-safety

Keep passwords and other sensitive information out of your chat logs and inboxes.

• privacy
• onetime
• secrets
• chat

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

• network-security
• pcap
• security
• arkime

An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity

• ssh
• honeypot
• go
• golang

A network sniffer that logs all DNS server replies for use in a passive DNS setup

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

• threat-hunting
• purpleteam
• python3
• windows-eventlog

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

• sigma
• python3
• evtx
• sigma-rules

Fake sshd that logs ip addresses, usernames, and passwords.

🔥 A fully open source audit logs service and embeddable UI easily deployed to your own Kubernetes cluster. Brought to you by replicated.com and boxyhq.com 🚀

• enterprise-software
• kubernetes
• audit-logs
• enterprise-ready

Share sensitive info without leaving a trace in your chat logs or email accounts.

Encrypted Chat. No History. No Logs.

• encryption
• nacl
• chat
• secure

A Python library and command line tools to provide interactive log visualization.

• cybersecurity
• investigation
• malware-analysis
• malware-research

Prevent your secrets from leaking into logs, std* etc.

• go
• secrets

Longitudinal Analysis of SSH Cowrie Honeypot Logs

Honeypot that mimics Tomcat manager endpoints. Logs requests and saves attacker's WAR file for later study

• honeypot
• spring-boot
• tomcat

Parse cowrie honeypot logs into a neo4j database

• cowrie
• honeypot
• cybersecurity
• graph-database