CQL Hub is an open repository of detection and hunting queries for CrowdStrike NextGen SIEM and Falcon LogScale. All queries stored here are automatically published to cql-hub.com , making them easily accessible to the community.
☆68Jun 5, 2026Updated last week
Alternatives and similar repositories for Query-Hub
Users that are interested in Query-Hub are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆29Mar 6, 2026Updated 3 months ago
- Vigil - an ever improving 100% OpenSource AI system for security☆177Updated this week
- A mirror image of my detection rules☆151Updated this week
- A Windows Event Log MCP☆49Aug 25, 2025Updated 9 months ago
- sKaleQL is an opinionated template repository for managing, executing, and organizing Kusto Query Language (KQL) queries against Azure Lo…☆20May 20, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- PatchWise automates patch review and static analysis for the Linux kernel, streamlining upstream contributions and ensuring code quality.☆47Jun 1, 2026Updated 2 weeks ago
- This repository contains Community and Field contributed content for LogScale☆342May 11, 2026Updated last month
- A PowerShell-based script to analyze network logs from CSV files and detect potential beaconing behavior. Supports VirusTotal integration…☆17May 11, 2025Updated last year
- Plugins for Anthropic's Claude Code, Codex, Cursor and more☆50Updated this week
- MCP use case for SecOps automation w/ Splunk,CrowdStrike EDR, MISP☆21Jul 7, 2025Updated 11 months ago
- A collection of my favourite workflows☆10Dec 31, 2024Updated last year
- Hundred Days of Yara Challenge☆12Jun 21, 2022Updated 3 years ago
- A guide to using Azure Data Explorer and KQL for DFIR☆124May 16, 2022Updated 4 years ago
- Threat feeds designed to extract adversarial TTPs and IOCs, using: ✨AI✨☆72Jun 4, 2026Updated last week
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Minimal Indicator Storage System☆11Feb 8, 2021Updated 5 years ago
- Provides a multi-platform Graphical User Interface for hashlookup☆11Jul 12, 2024Updated last year
- a-ray-grass is a yara module that provides support for DCSO-format bloom filters in yara. In the context of hashlookup, it allows quickly…☆14Aug 19, 2022Updated 3 years ago
- Synapse Rapid Power-up for SinkDB☆11Jun 24, 2025Updated 11 months ago
- ☆10Dec 24, 2022Updated 3 years ago
- Indicators of compromise from to analysis and research by Nextron Threat Research team☆12Jun 2, 2026Updated last week
- ☆47Updated this week
- A Compiler from Sigma rules to VQL☆19May 18, 2026Updated 3 weeks ago
- A python library to create BloodHound OpenGraphs☆63Feb 4, 2026Updated 4 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆14Jan 2, 2025Updated last year
- Stealthy Loader-cum-dropper/stage-1/stager targeting Windows10☆37Nov 5, 2022Updated 3 years ago
- ☆13Nov 10, 2020Updated 5 years ago
- Welcome to the hands-on resource hub for the Generative AI Development Environments Bootcamp. This repo is designed to help you explore d…☆28Oct 22, 2025Updated 7 months ago
- Historical Observations of Actionable Reputation Data☆13Jun 26, 2018Updated 7 years ago
- Storage for the IOCs I collect☆11Apr 3, 2026Updated 2 months ago
- Indicators of Normality☆11Jul 22, 2022Updated 3 years ago
- Script to pull newly-registered domains and check for similarity against a provided word list.☆13Aug 2, 2020Updated 5 years ago
- This is a repository to experiment with MCP for security☆47Jan 22, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- MPC Server for PySpark inpired by the LakeSail☆18Feb 26, 2026Updated 3 months ago
- Everything related to YARA☆16Apr 18, 2026Updated last month
- Open source HIDS tailored for Microsoft Windows and Active Directory☆31Feb 13, 2026Updated 4 months ago
- Utility to detect errors in Intune Firewall Rules XML☆20Mar 1, 2024Updated 2 years ago
- ☆14Aug 21, 2022Updated 3 years ago
- Threat Detection Rules (Snort/Sigma/Yara)☆14Jan 23, 2024Updated 2 years ago
- Bro things..☆15Oct 23, 2015Updated 10 years ago