
honeypot-data
Public honeypot datasets and observation reports with HTTP/TLS fingerprint data (JA3/JA4), pseudonymized source IPs, and exploitation attempt…

Public honeypot datasets and observation reports with HTTP/TLS fingerprint data (JA3/JA4), pseudonymized source IPs, and exploitation attempt…

End-to-end SOC incident analysis and threat hunting playbook targeting Microsoft SharePoint privilege escalation (CVE-2023-29357) using SIEM logs,…

Pwsh tool for AD Group Enumeration Auditing

CredsHunter - Credential Hunting scripts for Windows and Linux OS

Threat hunting command system for agentic IDEs

Automated vulnerability scanner for CVE-2026-0257 (PAN-OS GlobalProtect Authentication Bypass) with TLS certificate enumeration, authentication…

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

Turn Rootly incidents, alerts, and teams into a queryable knowledge graph. Visualize service dependencies, on-call coverage gaps, and cross-incident…

A portable C# utility for enumerating local and remote windows sessions

Determines if public exploits are available for a given CVE. Uses APIs like exploit-db or NVD to ide

A powerful and user-friendly browser extension that streamlines investigations for security professionals.

This repository contains informaion about the Fortigate firewall vulnerability (CVE-2022-40684) and affected data that were publicly disclosed by the…

A GitHub recon/monitoring tool for finding internal leaks belonging to your organisation.

DPS' Lightweight Investigation Notebook

KQL Hunting for WinRAR CVE-2023-38831

Python-based tool to detect ransomware infections and malicious code in MySQL instances. Performs reconnaissance, user enumeration, and deep scans…

Shodan Monitoring integration for TheHive.

Enumerate various traits from Windows processes as an aid to threat hunting