Ranked by Attention Score: stars gained over the last 180 complete days
12 repositories by Attention Score · May 7, 2026 – Nov 2, 2026 (UTC)
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
No description provided by the repository host.
A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
Your Everyday Threat Intelligence
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents
Extract and aggregate threat intelligence.
Scirius is a web application for Suricata ruleset management and threat hunting.
🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.
Sigma Queries turned into KQL for Defender using pysigma - Automated