thrandomv/cve-2026-31431-detectionDefensive detection package for CVE-2026-31431 (Linux kernel AF_ALG LPE). Sigma, Falco, auditd, KQL, and EQL rules mapped to MITRE ATT&CK…
itzmeshervin/siem-dashboardA lightweight, real-time Security Information and Event Management (SIEM) dashboard built using Streamlit. It collects system logs, detects USB and…
lopqto/cve-2021-41773_honeypotLightweight honeypot for Apache HTTP Server path traversal vulnerability CVE-2021-41773, designed to capture and log exploitation attempts.
tnich/honsshHonSSH is designed to log all SSH communications between a client and server.
laramies/theharvesterE-mails, subdomains and names Harvester - OSINT
cowrie/cowrieCowrie SSH/Telnet Honeypot https://docs.cowrie.org/
paloaltonetworks/unit42-timely-threat-intelA collection of files with indicators supporting social media posts from Palo Alto Network's Unit 42 team to disseminate timely threat intelligence.
xaitax/sploitscanAggregates CVE details, exploit databases, and EPSS scores with AI risk assessment and vulnerability scanner import for prioritized patching.
tomchop/malcomMalcom - Malware Communications Analyzer
kevthehermit/pastehunterScanning pastebin with yara rules
dev-lu/osint_toolkitOpen source platform for cyber security analysts with many features for threat intelligence and detection engineering.
invictus-ir/microsoft-extractor-suiteA PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.
nullarray/intrec-packIntelligence and Reconnaissance Package/Bundle installer.
cloud-sniper/cloud-sniperDetection-as-code platform that automates cloud security incident response by correlating artifacts, analyzing IOCs, and orchestrating…
safelineman/agentic-soc-simulationAI 驱动的 SOC 仿真平台
emrekybs/douglas-042Triages a suspect Windows machine in minutes. Collects processes, services, autoruns, event logs and forensic artifacts, flags attacker activity, and…
