ma1am/cve-2022-26134-exploit-detectionThis repository contains Yara rule and the method that a security investigator may want to use for CVE-2022-26134 threat hunting on their Linux…
rulebricks/claude-code-guardrailsReal-time guardrails for Claude Code tool calls.
devopstoday11/tarianAnti-Virus for K8s. Protect your Applications running on Kubernetes from malicious attacks with pre-registered source code, runtime processes…
neo23x0/raccineA Simple Ransomware Vaccine
nccgroup/threat-intelligence-alertsWelcome to the NCC Group Threat Intelligence Alert repo, here you will find the alerts which we have raised to our customers regarding intelligence…
opensourcemalware/vercel-april2026-incident-responseThis is an incident response playbook we created for the Vercel April 2026 compromise
0xsyr0/log4shellThis repository contains all gathered resources we used during our Incident Reponse on CVE-2021-44228 and CVE-2021-45046 aka Log4Shell.
honeynet/log4shell-dataData we are receiving from our honeypots about CVE-2021-44228
bushidouk/ransomware-tool-matrixA resource containing all the tools each ransomware gangs uses
letsdefend/awesome-soc-analystUseful resources for SOC Analyst and SOC Analyst candidates.
suprhackersteve/crescendoCrescendo is a swift based, real time event viewer for macOS. It utilizes Apple's Endpoint Security Framework.
sekoialab/fastir_collectorLive Windows forensic acquisition tool that collects system artefacts (registry, memory, disk, files) into CSV/JSON for early compromise detection…
inquest/yara-rulesCollection of YARA rules for hunting malware, malicious Office documents, and exploit artifacts, with references to samples and research write-ups.
opensourcemalware/polinriderTechnical dossier on the DPRK-linked PolinRider supply-chain attack, documenting obfuscated JS payload injection, git history manipulation, C2…
threathunters-io/qlogETW-based Windows process creation logger that enriches events with file hashes, signatures, and parent process details, outputting to Windows…
sifalcon/detectionCurated collection of detection rules and IOCs extracted from DFIR engagements and malware analyses to support threat hunting, incident response, and…
technion/disablesmbcompressionCVE-2020-0796 Flaw Mitigation - Active Directory Administrative Templates
