CQL Hub is an open repository of detection and hunting queries for CrowdStrike NextGen SIEM and Falcon LogScale. All queries stored here are automatically published to cql-hub.com , making them easily accessible to the community.
☆40Feb 27, 2026Updated last week
Alternatives and similar repositories for Query-Hub
Users that are interested in Query-Hub are comparing it to the libraries listed below
Sorting:
- MCP use case for SecOps automation w/ Splunk,CrowdStrike EDR, MISP☆21Jul 7, 2025Updated 7 months ago
- Python library to convert MathML to OMML (Office Math Markup Language)☆10Nov 24, 2019Updated 6 years ago
- Provides a multi-platform Graphical User Interface for hashlookup☆12Jul 12, 2024Updated last year
- ☆10Dec 24, 2022Updated 3 years ago
- Enterprise SOC Lab with automated threat detection, SOAR orchestration, and incident response☆28Jan 21, 2026Updated last month
- A collection of my favourite workflows☆10Dec 31, 2024Updated last year
- Tool to help you activate a device that was downgraded with iOS 16 sep☆11Feb 28, 2024Updated 2 years ago
- Indicators of compromise from to analysis and research by Nextron Threat Research team☆12Sep 17, 2025Updated 5 months ago
- Storage for the IOCs I collect☆11Mar 26, 2025Updated 11 months ago
- Synapse Rapid Power-up for SinkDB☆11Jun 24, 2025Updated 8 months ago
- a-ray-grass is a yara module that provides support for DCSO-format bloom filters in yara. In the context of hashlookup, it allows quickly…☆14Aug 19, 2022Updated 3 years ago
- Hundred Days of Yara Challenge☆12Jun 21, 2022Updated 3 years ago
- Open source HIDS tailored for Microsoft Windows and Active Directory☆29Feb 13, 2026Updated 3 weeks ago
- A set of XSLT stylesheets to write JSX-equivalent in pure XML☆10Aug 30, 2016Updated 9 years ago
- This repository is used for maintaining the SDMX-CSV message specifications.☆12Aug 27, 2025Updated 6 months ago
- sKaleQL is an opinionated template repository for managing, executing, and organizing Kusto Query Language (KQL) queries against Azure Lo…☆19May 20, 2025Updated 9 months ago
- Qfsm is a graphical tool for designing finite state machine, written in C++ using the Qt library☆12Nov 19, 2018Updated 7 years ago
- A guide to using Azure Data Explorer and KQL for DFIR☆124May 16, 2022Updated 3 years ago
- Threat Detection Rules (Snort/Sigma/Yara)☆14Jan 23, 2024Updated 2 years ago
- Indicators of Normality☆11Jul 22, 2022Updated 3 years ago
- Minimal Indicator Storage System☆11Feb 8, 2021Updated 5 years ago
- Everything related to YARA☆16Feb 19, 2026Updated 2 weeks ago
- Bro things..☆15Oct 23, 2015Updated 10 years ago
- Repository with Hunting and Detection Queries for Microsoft Sentinel and Microsoft Defender XDR☆16Nov 7, 2025Updated 3 months ago
- Library handling the communication with Apple's Tatsu Signing Server (TSS)☆10Mar 21, 2025Updated 11 months ago
- Historical Observations of Actionable Reputation Data☆13Jun 26, 2018Updated 7 years ago
- A PowerShell-based script to analyze network logs from CSV files and detect potential beaconing behavior. Supports VirusTotal integration…☆17May 11, 2025Updated 9 months ago
- ☆14Aug 21, 2022Updated 3 years ago
- Script to pull newly-registered domains and check for similarity against a provided word list.☆13Aug 2, 2020Updated 5 years ago
- Utility to detect errors in Intune Firewall Rules XML☆20Mar 1, 2024Updated 2 years ago
- ☆14Jan 2, 2025Updated last year
- Analyzing 6000+ n8n workflows to discover real-world automation patterns☆45Dec 3, 2025Updated 3 months ago
- An introduction to detection engineering☆14Jan 3, 2025Updated last year
- This repository contains Community and Field contributed content for LogScale☆323Updated this week
- Globally distributed honeypots and HoneyNets IOCs and file reversing☆16Apr 22, 2024Updated last year
- The PCI DSS Compliance Toolkit is an open-source project aimed at helping organizations achieve and maintain compliance with the (PCI DS…☆19Dec 13, 2023Updated 2 years ago
- This Guidance helps customers assess their foundational security setup in their AWS account☆23Oct 19, 2024Updated last year
- Links to malware-related YARA rules☆15Sep 29, 2022Updated 3 years ago
- FireEye iSIGHT Alert Feeder for TheHive, an Open Source and Free Security Incident Response Platform☆16Oct 12, 2018Updated 7 years ago