SyntheticSun
jonrau1/syntheticsunServerless AWS security automation framework that ingests threat intelligence, applies ML-based anomaly detection (RCF, IP Insights), and enriches…
anomaly-detectioncloud-securityincident-response+3
82
jonrau1/syntheticsunServerless AWS security automation framework that ingests threat intelligence, applies ML-based anomaly detection (RCF, IP Insights), and enriches…
maldroid/maldrolyzerSimple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)
mfmokbel/crawlectorCrawlector is a threat hunting framework designed for scanning websites for malicious objects.
amavis/amavisamavis is a high-performance email content filter framework written in Perl.
karim852/kumo-domain-recon-toolDomain OSINT and security reconnaissance framework running 26 parallel modules for DNS, ports, subdomains, leaked credentials, exposed endpoints,…
jstrosch/subparseModular malware analysis artifact collection and correlation framework
blueteam0ps/memoptixA Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.
adversarial-detection-engineering/adversarial-detection-engineering-frameworkA framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concrete examples…
corelight/threat-hunting-guideStructured guide to threat hunting using Zeek logs, aligned with MITRE ATT&CK framework for proactive detection of adversary tactics and techniques.
or1un/mosaicPrivacy-first behavioral intelligence framework for multi-platform analysis and sociodynamic research.
owasp/odtmOWASP Ontology-driven Threat Modelling framework
bkcs-hust/lstm-miA LSTM based framework for handling multiclass imbalance in DGA botnet detection
opengraphintel/ogi-transformsOpen Source Link Analysis & OSINT Framework
owasp/fiasseA Framework for Integrating Application Security into Software Engineering (FIASSE) using the Securable Software Engineering Model (SSEM)
expert21/hermes-osintHermes — an ephemeral, Docker-powered OSINT framework for testing, tinkering, and secure investigative automation.
olizimmermann/phishcollectorPhishCollector is a research framework for collecting, analysing, and tracking phishing sites.
thisislibra/m3A simple and scalable Android bot emulation framework, as presented at Black Hat Europe 2021's Arsenal, as well as atHack 2021's Arsenal