netwatch
matthart1983/netwatchReal-time network diagnostics in your terminal. One command, zero config, instant visibility.
defensive-toolsdigital-forensicsdns-analysis+8
3.1k
matthart1983/netwatchReal-time network diagnostics in your terminal. One command, zero config, instant visibility.
manuelschipper/naha guard that blocks catastrophic agent actions
0x0allenace/windows-malware-behavioral-analysisBehavioral Malware Analysis of a Simulated Multi-Stage Windows Malware Sample using FLARE-VM and REMnux. Evidence-driven DFIR investigation with IOC…
karitamw/printnightmare-detection-mitigation-labSanitised Windows security lab demonstrating Active Directory administration, host and network detection, and layered mitigation of CVE-2021-34527.
rauljvc8/cve-2025-68616-detecting-and-patching-an-ssrf-in-weasyprint-with-wazuhHands-on vulnerability management case study: how Wazuh flagged a real SSRF (CVE-2025-68616) in WeasyPrint, and how I reproduced and patched it.
boostedchaos/fleet-cve-scannerAn open-source, single-script CVE scanner for RMM-managed fleets. Pure PowerShell 7 — joins your RMM software inventory against NVD, CISA KEV, EPSS…
sachitrafa/yourmemoryAgentic AI memory with Ebbinghaus forgetting curve decay. +16pp better recall than Mem0 on LoCoMo.
probablysecure/triage-cve-2021-44228-log4shell-log4j-Goal is to triage well known attack and learn how security teams quickly respond.
probablysecure/triage-cve-2017-0144Goal is to triage well known attacks and learn how security teams quickly respond.
thehive-project/cortexCortex: a Powerful Observable Analysis and Active Response Engine
mukul975/cve-mcp-serverProduction-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan,…
manishrawat21/analysisHands-on analysis of common APT attack techniques, focused on how they show up in logs and how defenders can realistically detect them.
devtint/cve-2026-41940Technical analysis and educational resource for CVE-2026-41940, covering root cause, scanner behavior, prevention, mitigation, IOC hunting, and VaPT…
synacktiv/pike-agentExperimental Linux strace LLM agent
v3ng4mxv1p3r/mobile-drop-device-soc-detectionEnd-to-end simulation of detecting a root-less Android Drop Device (Casper) using Wazuh SIEM to capture Layer 7 attacks like Shellshock…
vigil-xy/agent-scanningUnified dashboard to monitor, govern, and audit AI agents in real-time. Enforce budgets, detect policy violations, and export compliance reports for…
adversarial-detection-engineering/adversarial-detection-engineering-frameworkA framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concrete examples…
kamalideenak/microsoft-defender-for-endpoint-deployment-on-windows-10-11-deviceThis repository documents how deployment of Microsoft Defender for Endpoint on a Windows 11 device, including onboarding via local script, enabling…