CrowdStrike Falcon Advanced Threat Hunting Queries
☆14Aug 19, 2026Updated 2 months ago
Alternatives and similar repositories for CrowdStrike-Queries
Users that are interested in CrowdStrike-Queries are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Best Practices, queries, and packages for CQL the language of CrowdStrike's LogScale (Humio) log manager.☆14May 7, 2026Updated 5 months ago
- CQL Hub is an open repository of detection and hunting queries for CrowdStrike NextGen SIEM and Falcon LogScale. All queries stored here …☆86Updated this week
- Infrastructure as code for CrowdStrike — manage detections, saved searches, lookup files, and more with a Terraform-like lifecycle.☆26Updated this week
- A collection of Claude Code skills that help security teams stay secure☆58Apr 27, 2026Updated 6 months ago
- A collection of CQL hunting leads for CrowdStrike Falcon and LogScale, mapped to the MITRE ATT&CK framework.☆35Sep 8, 2026Updated last month
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- 软件逆向☆11Jan 14, 2017Updated 9 years ago
- A public repository of quality research on cyber attack techniques. This is the backend for the Technique Research Report (TRR) Library.☆33Updated this week
- KQL queries for Microsoft Defender Advanced Hunting organized around the TTPs of the MITRE ATT&CK framework.☆25Nov 7, 2024Updated last year
- The Kerberoasting / AD password-audit wordlist I use on engagements: priority-merged HashMob large list + The-Viper-One's kerberoast_pws,…☆16Oct 2, 2026Updated 3 weeks ago
- event shipper for Carbon Black Defense notifications☆10Feb 25, 2023Updated 3 years ago
- fork from A-Protect☆12Nov 26, 2018Updated 7 years ago
- A Windows-first malware analysis toolkit: Unicorn-powered PE emulator with 90+ Win32 API hooks, runtime IOC extraction, and one-shot repo…☆19Apr 28, 2026Updated 6 months ago
- ☆14Sep 2, 2026Updated last month
- nools in TypeScript.☆13Feb 12, 2019Updated 7 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- EDRUnChoker - fileless WMI defense that removes EDRChoker QoS throttling policies☆49Jun 8, 2026Updated 4 months ago
- ☆28Oct 22, 2026Updated last week
- ☆91Sep 25, 2026Updated last month
- LLM-assisted adversary procedure extraction pipeline for threat-informed defense cycle.☆22Sep 20, 2026Updated last month
- A GUI for packet captures in Windows using pktmon☆12Apr 17, 2023Updated 3 years ago
- Atlassian confluence unauthenticated ONGL injection remote code execution scanner (CVE-2022-26134).☆13Jan 22, 2025Updated last year
- Nessus Cheat Sheet in HTML, PDF, PNG, ADOC☆12Apr 10, 2022Updated 4 years ago
- Evidence-focused malware reverse engineering with deep PE/.NET inspection, Ghidra reconstruction, AI cross-checks, YARA, and ELF debuggin…☆15Oct 10, 2026Updated 2 weeks ago
- A threat hunting process☆147Oct 2, 2026Updated 3 weeks ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Tiny: a tiny programming language implemented in PowerShell☆15Jun 21, 2023Updated 3 years ago
- Code to create, manage, and deploy testing environments using Terraform and Ansible. This includes environments for Kubernetes clusters, …☆11Mar 9, 2024Updated 2 years ago
- Crowdstrike Falcon Host script for iterating through instances to get alert and other relevant data☆14Jul 16, 2019Updated 7 years ago
- KGRAG - KnowledgeGraph RAG☆10Oct 21, 2026Updated last week
- CTI resources for Claude, maintained by Feedly☆36Oct 21, 2026Updated last week
- AutoMSF is a Python script designed for fast generation and deployment of multiple types of Meterpreter reverse_https payloads. Created t…☆19Mar 20, 2025Updated last year
- ☆16May 8, 2025Updated last year
- A general-purpose hash/checksum generator☆12Dec 27, 2012Updated 13 years ago
- A lightweight Windows DLL that automatically hides all top-level windows from screen capturing utilities (e.g., OBS, Snipping Tool) by us…☆24Aug 29, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Kostenlose Prozessbeschreibungen☆12Jul 4, 2024Updated 2 years ago
- Automate forensic traige package collection and evidence parsing with KAPE and Crowdstrike☆15Mar 5, 2022Updated 4 years ago
- Bootstrapping and optimizing trash can mac pro for local ai☆23Oct 6, 2026Updated 3 weeks ago
- This repository stores the proof-of-concept of Windows malware categorized with MITRE ATT&CK.☆14Nov 8, 2024Updated last year
- This project automates the creation of a complete security lab environment for detection engineering and attack simulation.☆14Aug 8, 2025Updated last year
- BITS-Quellcode, auch für das hugo-Tool zum Erzeugen statischer HTML-Seiten☆20Aug 16, 2026Updated 2 months ago
- Some Threat Hunting queries useful for blue teamers☆133May 13, 2022Updated 4 years ago