threathunting · GitHub Topics

IntelOwl: manage your Threat Intelligence at scale

安全 Python threat-intelligence IoC (Disambiguation)incident-response cyber-threat-intelligence enrichment honeynet OSINT osint-python threatintel malware-analysis threat-hunting Hacktoberfest cyber-security Cybersecurity threathunting dfir

Python 4.15 k

4 天前

alexandreborges / malwoverview

Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, Threa...

Malware virustotal malpedia urlhaus alienvault malshare threathunting Cybersecurity malware-analysis threat-hunting threatintelligence

Python 3.26 k

5 个月前

mandiant / ThreatPursuit-VM

Threat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and hunting designed for intel and malware analysts as well a...

cyber threat threatintelligence threathunting intelligence intelligence-analysis 数据科学 analytics Malware virtual-machine

PowerShell 1.27 k

2 年前

atc-project / atomic-threat-coverage

Actionable analytics designed to combat threats

mitre-attack threathunting threatintelligence

Python 989

3 年前

darkquasar / AzureHunter

A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365

Azure digital-forensics cloud-forensics Cybersecurity azuresearcher azforensics threat-hunting threathunting incident-response unifiedauditlog dfir

PowerShell 787

3 年前

tenzir / tenzir

Tenzir is the data pipeline engine for security teams.

incident-response threathunting siem soc 安全 DataOps investigation pcap netflow suricata zeek pipelines sigma Hacktoberfest

C++ 681

2 天前

SlimKQL / Hunting-Queries-Detection-Rules

KQL Queries. Microsoft Defender, Microsoft Sentinel

Azure kql sentinel defender Microsoft mitre-attack threathunting

HTML 652

4 天前

mthcht / ThreatHunting-Keywords

#Awesome#Awesome list of keywords and artifacts for Threat Hunting sessions

PowerShell 580

2 个月前

alexverboon / MDATP

#学习与技能提升#MDATP

blogs defender-for-endpoint kql learning threathunting

PowerShell 461

1 年前

GACWR / OpenUBA

#计算机科学#A robust, and flexible open source User & Entity Behavior Analytics (UEBA) framework used for Security Analytics. Developed with luv by Data Scientists & Security Analysts from the Cyber Security Indu...