Agentic-SOC-Simulation
safelineman/agentic-soc-simulationAI 驱动的 SOC 仿真平台
penetration-testing-frameworksvulnerability-analysisforensics+8
166
Log parsing, SIEM, centralized logging, forensic timeline, and security event correlation tools.
safelineman/agentic-soc-simulationAI 驱动的 SOC 仿真平台
corelight/community-id-specAn open standard for hashing network flows into identifiers, a.k.a "Community IDs".
swimlane/soc-fakerA python package for use in generating fake data for SOC and security automation.
trinitor/cve-vulnerability-information-downloaderDownloads and aggregates CVSS, EPSS, and CISA known exploited vulnerability data into unified JSON/CSV files and a SQLite database. Enriches…
cyberark/ketshashA little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs.
target/strelka-uiStrelka Web UI for File Submission and Analysis
ctrlaltint3l/intelligenceCentralized repository for malware samples, threat intelligence, IOCs, and security tooling logs to support threat research and incident response…
hxnoyd/ossem-power-upA tool to assess data quality, built on top of the awesome OSSEM.
mthcht/purpleteamPurpleteam scripts simulation & Detection - trigger events for SOC detections
abdulrhmanalfaifi/fennecArtifact collection tool for *nix systems
blacksnufkin/invoke-dumpmdeconfigPowerShell script to dump Microsoft Defender Config, protection history and Exploit Guard Protection History (no admin privileges required )
t3l3m3try/threat_huntingSome Threat Hunting queries useful for blue teamers
aurva-io/aiostackAI runtime inventory: discover shadow AI, trace LLM calls
bruneaug/dshield-siemDShield Sensor Log Collection with ELK
tsale/sigma_rulesSigma rules to share with the community
cyberark/skywrapperSkyWrapper helps to discover suspicious creation forms and uses of temporary tokens in AWS