#1
mgeeky/redwardenCobalt Strike C2 Reverse proxy that fends off Blue Teams, AVs, EDRs, scanners through packet inspection and malleable profile correlation
dropbox/securitybotDistributed alerting for the masses!
toolswatch/vfeedThe Correlated CVE Vulnerability And Threat Intelligence Database API
mandiant/silketwC# wrapper for ETW that serializes kernel and user-mode event data to JSON for threat hunting, malware analysis, and incident response, with Yara…
jerlendds/osintbuddyNode graphs, OSINT data mining, and plugins. Connect unstructured and public data for transformative insights. The rewrite can be found @…
cloudflare/mitmengineA MITM (monster-in-the-middle) detection tool. Used to build MALCOLM:
montysecurity/c2-trackerLive Feed of C2 servers, tools, and botnets
grapl-security/graplGraph platform for Detection and Response
t4d/stalkphishStalkPhish - The Phishing kits stalker, harvesting phishing kits for investigations.
mandiant/mandiant-azure-ad-investigatorRead-only PowerShell module for detecting UNC2452 and other threat actor artifacts in Azure AD, auditing federated domains, service principals,…
ebwi11/agentsmith-hidsBy Kprobe technology Open Source Host-based Intrusion Detection System(HIDS), from E_Bwill.
krmaxwell/maltrieveA tool to retrieve malware directly from the source for security researchers.
ciscocsirt/gosintThe GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs).
chronicle/gctiDetection signature repository providing YARA rules and threat-hunting content for identifying malware and malicious activity across enterprise…
