1.JPCERTCC / LogonTracer
Investigate malicious Windows logon by visualizing and analyzing Windows event log
+107 stars
from 3,192 · score 4.68
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
14 repositories by Attention Score · Aug 5, 2026 – Nov 2, 2026 (UTC)
2.OTRF / ThreatHunter-Playbook
A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
+87 stars
from 4,619 · score 4.48
3.RyanDFIR / hindsight
Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox
+78 stars
from 1,474 · score 4.37
4.google / timesketch
Collaborative forensic timeline analysis
+68 stars
from 3,380 · score 4.23
5.fox-it / dissect
Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).
+45 stars
from 1,134 · score 3.83
6.Bert-JanP / Hunting-Queries-Detection-Rules
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
+38 stars
from 1,726 · score 3.66
7.Neo23x0 / Loki
Loki - Simple IOC and YARA Scanner
+37 stars
from 3,765 · score 3.64
8.wagga40 / Zircolite
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
+33 stars
from 838 · score 3.53
9.ydkhatri / mac_apt
macOS (& ios) Artifact Parsing Tool
+31 stars
from 1,067 · score 3.47
10.yeti-platform / yeti
Your Everyday Threat Intelligence
+27 stars
from 2,011 · score 3.33
11.pedramamini / ThreatIngestor
Extract and aggregate threat intelligence.
+12 stars
from 920 · score 2.56
12.tomchop / malcom
Malcom - Malware Communications Analyzer
+4 stars
from 1,170 · score 1.61
13.dfirtrack / dfirtrack
DFIRTrack - The Incident Response Tracking Application
+3 stars
from 537 · score 1.39
14.opensourcesec / CIRTKit
Tools for the Computer Incident Response Team :computer:
+1 stars
from 152 · score 0.69