ThreatHunting-Keywords
mthcht/threathunting-keywordsAwesome list of keywords and artifacts for Threat Hunting sessions
defensive-toolsdigital-forensicsthreat-intelligence+3
669
Log parsing, SIEM, centralized logging, forensic timeline, and security event correlation tools.
mthcht/threathunting-keywordsAwesome list of keywords and artifacts for Threat Hunting sessions
orlikoski/skadiCollect, Process, and Hunt with host based data from MacOS, Windows, and Linux
kvasirsecurity/kvasirKvasir: Penetration Test Data Management
canyonroad/agentshExecution-Layer Security (ELS) for AI agents — policy-enforced shell with audit.
airbus-cert/winsharkA wireshark plugin to instrument ETW
the-dfir-report/sigma-rulesRules generated from our investigations.
mrash/psadpsad: Intrusion Detection and Log Analysis with iptables
corelight/zeek-cheatsheetsZeek Log Cheatsheets
v1d1an/s1emThis project is a SIEM with SIRP and Threat Intel, all in one.
pranshuchittora/simvynUniversal mobile devtool for Agents & Humans - control iOS Simulators, Android Emulators, and real devices from a single dashboard and CLI
xephora/threat-remediation-scriptsThis repository contains a list of new remediation scripts.
elc0mpa/aws-doctorPowerful open-source CLI to audit security, costs, and best practices in AWS. 🩺 ☁️
owasp/securetea-projectThe OWASP SecureTea Project provides a one-stop security solution for various devices (personal computers / servers / IoT devices)
hubblestack/hubbleHubble is a modular, open-source security compliance framework. The project provides on-demand profile-based auditing, real-time security event…
anssi-fr/dfir-o365rcPowerShell module for Office 365 and Azure log collection
randomuserid/adamaSearches For Threat Hunting and Security Analytics
t4d/phishingkithunterFind phishing kits which use your brand/organization's files and image.
back2root/log4shell-rexPCRE RegEx matching Log4Shell CVE-2021-44228 IOC in your logs