Tools

rootly-ai-labs/rootly-graphify-importer

Turn Rootly incidents, alerts, and teams into a queryable knowledge graph. Visualize service dependencies, on-call coverage gaps, and cross-incident…

endgameinc/sans_thir16

SANS Hunting on the Cheap

beyarz/cve-api

Unofficial api for cve.mitre.org

blevene/bandjacks

Cyber Threat Defense World Modeling

corelight/ecs-logstash-mappings

Mapping Corelight or Zeek data to Elastic Common Schema logs

iomoath/filewatchtower

FWT is a security analysis and file monitoring tool that utilizes Sysmon events.

romaissaadjailia/get-applockereventlog

This is a repo for fetching Applocker event log by parsing the win-event log

boostedchaos/fleet-cve-scanner

An open-source, single-script CVE scanner for RMM-managed fleets. Pure PowerShell 7 — joins your RMM software inventory against NVD, CISA KEV, EPSS…

kavan00/android-projector-c2-malware

Breakdown of a c2-network of chinese beamers - SilentSDK-Analysis

adityabhatt3010/cve-2025-49706-sharepoint-spoofing-vulnerability-under-active-exploitation

A deep dive into CVE-2025-49706 — the SharePoint spoofing flaw now exploited in the wild for stealthy web shell deployment and privilege escalation.

rapticore/orenpmguard

Defense Against the Shai-Hulud Supply Chain Attack

aquasecurity/vexhub-crawler

Collect VEX documents and update VEX Hub

wortell/log4j

Repo containing all info, scripts, etc. related to CVE-2021-44228