Threat hunting repo for my independent study on threat hunting with OSQuery
☆27Jan 16, 2018Updated 8 years ago
Alternatives and similar repositories for ThreatWaffle
Users that are interested in ThreatWaffle are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Recon Hunt Queries☆78May 16, 2021Updated 5 years ago
- Creates an ATT&CK Navigator map of an Adversary Emulation Plan☆17Sep 4, 2021Updated 5 years ago
- Collaborative, web-based case management for incident response☆26Jan 23, 2024Updated 2 years ago
- PowerGRR is an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting.☆57Mar 18, 2022Updated 4 years ago
- A specialized environment for crafting, validating, and testing LimaCharlie detection rules☆15Sep 14, 2026Updated last month
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆19Aug 2, 2020Updated 6 years ago
- Linux and Windows Hardening Points☆12Mar 6, 2018Updated 8 years ago
- ☆18May 23, 2024Updated 2 years ago
- Create alerts in The Hive from your Graylog alerts, to be turned into Hive cases.☆45Aug 17, 2020Updated 6 years ago
- Passivedns monitor implementation in Rust.☆12Apr 21, 2016Updated 10 years ago
- Windows version of honeybits - a PoC tool to create breadcrumbs and honeytokens, to lead the attackers to your honeypots!☆24Jun 19, 2017Updated 9 years ago
- Workflows for Shuffle☆25Oct 26, 2022Updated 3 years ago
- A shell script to download malware domains from various sources, and configuring unbound DNS config file to be used as a local recursive …☆19Sep 12, 2014Updated 12 years ago
- A Fast, Modular, and Scalable TLS/SSL Security Scanner Written in Rust☆38Updated this week
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A collection of infosec related scripts and information.☆54Oct 2, 2024Updated 2 years ago
- Bro analyzer that detects Google's QUIC protocol☆12Mar 2, 2021Updated 5 years ago
- FRAC and RIFT☆17Mar 16, 2019Updated 7 years ago
- VelociraptorMCP is a Model Context Protocol bridge for exposing LLMs to MCP clients.☆94Jun 28, 2026Updated 3 months ago
- PyVelociraptor contains the python bindings for the Velociraptor API.☆23May 5, 2026Updated 5 months ago
- ☆170Jan 20, 2021Updated 5 years ago
- Security Logon Event Analysis Tools - a collection of scripts for collecting, parsing, and analyzing logon events from Windows Security L…☆16Jun 22, 2016Updated 10 years ago
- pySigma Cookiecutter backend template☆25Sep 17, 2025Updated last year
- An Interactive Pcap Editor (based on Scapy)☆23Oct 11, 2020Updated 6 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Queries to parse sysmon event log file with microsoft logparser☆60Mar 31, 2015Updated 11 years ago
- ☆34Jun 12, 2024Updated 2 years ago
- Threat Hunting with ELK Workshop (InfoSecWorld 2017)☆64Oct 31, 2017Updated 8 years ago
- Modular command-line threat hunting tool & framework.☆17Jul 20, 2020Updated 6 years ago
- Lists of sources and utilities utilized to hunt, detect and prevent evildoers.☆172Dec 10, 2018Updated 7 years ago
- Analyst tool for creating pivot maps of data sources☆16Sep 11, 2017Updated 9 years ago
- A Go implementation and parser for Sigma rules.☆102May 15, 2025Updated last year
- A threat hunting / data analysis environment based on Python, Pandas, PySpark and Jupyter Notebook.☆251Jul 19, 2021Updated 5 years ago
- Registry timestamp manipulation☆17Feb 26, 2014Updated 12 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Carve $MFT records from a chunk of data (for instance a memory dump)☆16Aug 21, 2016Updated 10 years ago
- ☆15Oct 9, 2021Updated 5 years ago
- Data from a BRAWL Automated Adversary Emulation Exercise☆215Oct 2, 2020Updated 6 years ago
- A tool for recursively scanning websites for defacements☆10Nov 22, 2022Updated 3 years ago
- rlyCTF (relay CTF) challenge to emulate real-world SSRF attacks.☆10Apr 13, 2019Updated 7 years ago
- Bro integration with osquery☆15Mar 24, 2023Updated 3 years ago
- ☆15Aug 20, 2019Updated 7 years ago