Ranked by Attention Score: stars gained over the last 7 complete days
22 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
A repository of sysmon configuration modules
Sysmon configuration file template with default high-quality event tracing
✨ A curated list of awesome threat detection and hunting resources 🕵️♂️
No description provided by the repository host.
Security sensor for realtime threat detection and protection
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
A curated list of awesome YARA rules, tools, and people.
A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
Rapidly Search and Hunt through Windows Forensic Artefacts
Windows Events Attack Samples
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation, and SIEM validation.
The Hunting ELK
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
Scirius is a web application for Suricata ruleset management and threat hunting.
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.
Collection of malware persistence and hunting information. Be a persistent persistence hunter!