
Detecting_blue_hammer_vuln
Threat hunting query for bluehammer CVE windows CVE-2026-33825

Threat hunting query for bluehammer CVE windows CVE-2026-33825

CarbonBlack hunting queries to detect PrintNightmare (CVE-2021-1675) exploitation via file, module load, and process events, based on Sigma rules.

CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065

Python script to search Citrix NetScaler logs for possible CVE-2023-4966 exploitation.

Kusto query-based detection and analysis tool for CVE-2021-44228 (Log4Shell) vulnerability, enabling rapid log hunting and exploitation…

KQL para deteccion de CVE-2025-21333 en Sentinel



High-interaction OPC UA honeypot for ICS/SCADA — multi-profile (oil & gas, water, power grid), live process simulation, per-session threat scoring,…

Medium-interaction SSH honeypot that logs brute force attacks and full attacker shell interactions, with customization options to reduce…

Automated secret and leak detection scanner for GitHub and paste sites, with heuristic filtering, IOL enrichment via Shhgit/TruffleHog, and ELK-based…

Distributed alerting for the masses!

LDAP Watchdog: A real-time linux-compatible LDAP monitoring tool for detecting directory changes, providing visibility into additions, modifications,…

Honeypot FTP server written in .NET Core (C#) for both Linux and Windows.

Free access-log compromise analyzer: webshell interactions, exploitation patterns and brute-force bursts in your Apache/nginx logs - severity,…