Tools

qazeer/farsightad

PowerShell script that aim to help uncovering (eventual) persistence mechanisms deployed by a threat actor following an Active Directory domain…

kaansk/shomon

Shodan Monitoring integration for TheHive.

rtfmkiesel/loldrivers-client

Scan your Windows computer for known vulnerable or malicious drivers.

backbay-labs/thrunt-god

Threat hunting command system for agentic IDEs

rushyo/vindicatetool

LLMNR/NBNS/mDNS Spoofing Detection Toolkit

nicolasriverocorvalan/cloud-sniper

Virtual Security Operations Center

mangod12/onealert

AI-powered SOC for OT/ICS networks — 6 autonomous agents, MITRE ATT&CK mapping, Suricata/Zeek ingestion, human-in-the-loop response, 330+ tests.…

jangeisbauer/gundog

gundog - guided hunting in Microsoft Defender

opensourcemalware/vercel-april2026-incident-response

This is an incident response playbook we created for the Vercel April 2026 compromise

nccgroup/impossibletravelloganalysis

Basic log analysis tool to detect impossible travel via IP address geographic information

honeylabshq/spip-go

Spip network sensor written in Go

zam89/cve-2024-3400-pot

Simple honeypot for CVE-2024-3400 Palo Alto PAN-OS Command Injection Vulnerability

corelight/extendintel

This package extends the Intel package to log more fields

pascalasch/cve-2023-38831-kql

KQL Hunting for WinRAR CVE-2023-38831

perryflynn/find-log4j

Find log4j for CVE-2021-44228 on some places * Log4Shell

arch1m3d/miniplasma-detection

Sigma detection rule for MiniPlasma (CVE-2020-17103)