rvbbit-arsenal
buter-chkalova/rvbbit-arsenalOffensive & defensive Linux kernel security research focused on rootkit behavior, observable artifacts and detection.
command-and-controldefensive-toolseducation+5
buter-chkalova/rvbbit-arsenalOffensive & defensive Linux kernel security research focused on rootkit behavior, observable artifacts and detection.
ccfos/nightingaleOpen-source alerting engine for time-series monitoring data. Connects to Prometheus, VictoriaMetrics, ElasticSearch, and other data sources. Supports…
mozilla/mozdefDEPRECATED - MozDef: Mozilla Enterprise Defense Platform
otrf/security-datasetsRe-play Security Events
magicsword-io/loldriversCurated database of vulnerable and malicious Windows drivers with YARA, Sigma, ClamAV, and Sysmon detection rules for proactive threat hunting and…
cloudflare/mitmengineA MITM (monster-in-the-middle) detection tool. Used to build MALCOLM:
theflink/hunt-sleeping-beaconsCallstack scanner that identifies IOCs of unpacked or injected C2 agents by analyzing thread idle behavior, unbacked memory, module stomping, APCs,…
t4d/stalkphishStalkPhish - The Phishing kits stalker, harvesting phishing kits for investigations.
cryps1s/darksurgeonDARKSURGEON is a Windows packer project to empower incident response, digital forensics, malware analysis, and network defense.
v1d1an/s1emThis project is a SIEM with SIRP and Threat Intel, all in one.
hubblestack/hubbleHubble is a modular, open-source security compliance framework. The project provides on-demand profile-based auditing, real-time security event…
marcosd4h/memhunterLive hunting of code injection techniques
microsoft/ics-forensics-toolsOpen-source forensics framework for analyzing Industrial PLC metadata and project files. Scans for suspicious artifacts in ICS environments to…
botherder/androidqfPortable forensic acquisition tool for Android devices that collects relevant data via USB debugging to identify potential spyware or compromise…
the-dfir-report/sigma-rulesRules generated from our investigations.
op7ic/blueteam.labBlue Team detection lab created with Terraform and Ansible in Azure.
safelineman/agentic-soc-simulationAI 驱动的 SOC 仿真平台