SOC-Multitool
zdhenard42/soc-multitoolA powerful and user-friendly browser extension that streamlines investigations for security professionals.
incident-responseinformation-gatheringosint+1
420
zdhenard42/soc-multitoolA powerful and user-friendly browser extension that streamlines investigations for security professionals.
rastrea2r/rastrea2rCollecting & Hunting for IOCs with gusto and style
3lp4tr0n/beaconhunterDetect and respond to Cobalt Strike beacons using ETW.
jepaynemsft/wefflesBuild a fast, free, and effective Threat Hunting/Incident Response Console with Windows Event Forwarding and PowerBI
spacesiren/spacesirenA honey token manager and alert system for AWS.
hashicorp-forge/groveA Software as a Service (SaaS) log collection framework.
cronup/malware-iocsCollects and organizes malware indicators of compromise (IOCs) for rapid threat detection, incident response, and actionable intelligence sharing.
malwaretech/citrixhoneypotDetect and log CVE-2019-19781 scan and exploitation attempts.
abdulrhmanalfaifi/fennecArtifact collection tool for *nix systems
cloud-sniper/cloud-sniperDetection-as-code platform that automates cloud security incident response by correlating artifacts, analyzing IOCs, and orchestrating…
threatlabz/iocsCurated Indicators of Compromise and YARA rules from Zscaler ThreatLabz public reports for threat hunting, malware research, and detection…
hybridbrothers/hunting-queries-detection-rulesThe purpose of this repository is to share KQL queries to help identify security misconfigurations, hunt for specific patterns, or detect malicious…
mazx0p/threathoundAutomated threat hunting and incident response tool for Windows Event Logs with Sigma rule integration, real-time detection, and forensic artifact…
blueteam0ps/memoptixA Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.
cristianzsh/amcache-evilhunterParse and analyze a Windows Amcache.hve registry hive, VirusTotal integration.
emrekybs/douglas-042Triages a suspect Windows machine in minutes. Collects processes, services, autoruns, event logs and forensic artifacts, flags attacker activity, and…
rootly-ai-labs/rootly-graphify-importerTurn Rootly incidents, alerts, and teams into a queryable knowledge graph. Visualize service dependencies, on-call coverage gaps, and cross-incident…
threatray/threat-researchIoCs and YARA rules from Threatray's Threat Research