threat · GitHub Topics

Real-time HTTP Intrusion Detection

threat-hunting threat-intelligence ids intrusion-detection-system threat-analyzer Go intrusion-detection intrusion threat iocs logs log

Go 3.05 k

1 年前

Yamato-Security / hayabusa

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

dfir threat hunting Windows event logs Rust sigma detection attack forensics incident response 安全 Cybersecurity incident-response security-automation threat-hunting

Rust 2.65 k

5 天前

activecm / rita-legacy

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

rita network-traffic threat scanning offensive-countermeasures bro-ids blueteam 安全 logs analytics analysis beacon dns

Go 2.51 k

1 年前

mandiant / ThreatPursuit-VM

Threat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and hunting designed for intel and malware analysts as well a...

cyber threat threatintelligence threathunting intelligence intelligence-analysis 数据科学 analytics Malware virtual-machine

PowerShell 1.27 k

2 年前

certtools / intelmq

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

Cybersecurity threat IoC (Disambiguation)Malware phishing cert intelligence incident-response alerts incident handling 自动化 Python

Python 1.05 k

25 天前

toolswatch / vFeed

The Correlated CVE Vulnerability And Threat Intelligence Database API

Common Vulnerabilities and Exposures (CVE)Python cwe vulnerability-databases vulnerability-detection threat intelligence-gathering Exploit vulnerability vulnerability-scanners threat-intelligence threatintel

Python 945

4 年前

cyberark / SkyArk

SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS

cloud-security PowerShell 安全 privileges cloud Amazon Web Services admins attacker threat Azure

PowerShell 894

6 个月前

Yamato-Security / WELA-deprecated

WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）

dfir log analysis forensics incident response sigma Windows event logs threat hunting timeline

PowerShell 783

2 年前

TonyPhipps / SIEM

SIEM Tactics, Techiques, and Procedures

threat Red blue purple team incident response baseline 监控 analysis scan log forensics Reconnaissance threat-hunting 安全 soc siem

PowerShell 633

10 天前

manifoldfinance / defi-threat

#区块链#a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations on decentralized finance

defi threat Common Vulnerabilities and Exposures (CVE)Solidity Cybersecurity 以太坊 erc20 erc721 smart-contracts nfts advisories 区块链 evm smart-contracts-audit

JavaScript 494

1 年前

TonyPhipps / Meerkat

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

threat Red blue purple team incident response baseline 监控 analysis scan log forensics Reconnaissance threat-hunting 安全 soc siem

PowerShell 460

7 个月前

TalEliyahu / Threat_Model_Examples

A collection of real-world threat model examples across various technologies, providing practical insights into identifying and mitigating security risks.

risk-assessment threat threat-analysis threat-modeling Cybersecurity

431

3 个月前

stanfrbd / cyberbro

A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.

Cybersecurity threat-intelligence ipinfo virustotal cyber-threat-intelligence dfir incident-response IoC (Disambiguation)OSINT osint-python Python 安全 threat-hunting blueteam Docker hash threat

HTML 422

5 天前

EXP-Tools / threat-broadcast

威胁情报播报

编程 safe Common Vulnerabilities and Exposures (CVE)threat broadcast

Python 390

5 天前

SupportIntelligence / Icewater

16,432 Free Yara rules created by

yara malware-analysis cluster threat dna

YARA 383

6 年前

opencybersecurityalliance / kestrel-lang

Kestrel threat hunting language: building reusable, composable, and shareable huntflows across different data sources and threat intel.

Hacktoberfest 安全 threat-hunting language Cybersecurity security-automation threat threat-intelligence threatintel

Python 315

9 个月前

Aabyss-Team / Ban-Hacker-IP-Plan

国内恶意IP封禁计划，还赛博空间一片朗朗乾坤

ban-hosts hacker intelligence IoC (Disambiguation)malice threat threat-intelligence

250

17 天前

opencybersecurityalliance / stix-shifter

This project consists of an open source library allowing software to connect to data repositories using STIX Patterning, and return results as STIX Observations.

Hacktoberfest Python stix Cybersecurity 安全 security-automation threat threat-hunting threat-intelligence threatintel

Python 246

2 个月前