DECeption with Evaluative Integrated Validation Engine (DECEIVE): Let an LLM do all the hard honeypot work!
☆296Aug 27, 2026Updated last month
Alternatives and similar repositories for DECEIVE
Users that are interested in DECEIVE are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Galah: An LLM-powered web honeypot.☆669Jul 24, 2025Updated last year
- TIM is a Kusto investigation platform that enables a user to quickly pivot between data sources; annotate their findings; and promotes co…☆23Aug 7, 2024Updated 2 years ago
- Sandbox samples and monitor them with kunai☆32Jul 21, 2026Updated 2 months ago
- Interactive, dynamic, and realistic LLM honeypots☆80Feb 18, 2025Updated last year
- A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters …☆355Oct 11, 2026Updated last week
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- A threat hunting process☆140Oct 2, 2026Updated 2 weeks ago
- Scripts for importing threat feeds and CTI articles, blogs, and reports into MISP.☆18Jun 28, 2026Updated 3 months ago
- This project aims to compare and evaluate the telemetry of various EDR products.☆1,994Sep 28, 2026Updated 2 weeks ago
- An Aggressor Script that utilizes NtCreateUserProcess to run binaries☆32Jan 30, 2025Updated last year
- An offensive postexploitation tool that will give you complete control over the Outlook desktop application and therefore to the emails c…☆166Oct 9, 2024Updated 2 years ago
- A New Exploitation Technique for Visual Studio Projects☆13Nov 5, 2023Updated 2 years ago
- Framework for Monitoring File Ingestion Source for Yara Matches☆52Mar 10, 2025Updated last year
- ☆795May 7, 2025Updated last year
- ☆34Apr 29, 2026Updated 5 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Repo with supporting material for the talk titled "Cracking the Beacon: Automating the extraction of implant configurations"☆11Feb 6, 2025Updated last year
- A Large Action Model designed to operate on MacOS or Windows which interacts with common C2 interfaces such as Cobalt Strike, Havoc, or B…☆26Feb 29, 2024Updated 2 years ago
- The CTI-CMM assessment is a stand-alone spreadsheet intended for users to download and use locally.☆25Jan 20, 2026Updated 8 months ago
- ☆13Dec 15, 2024Updated last year
- Threat-hunting tool for Linux☆1,090Oct 8, 2026Updated last week
- Finding ClickFix and FakeCAPTCHA like it's 1999☆158Updated this week
- A not so awesome list of adversary emulation gems for aspiring red/blue/purple teamers☆17Jul 19, 2022Updated 4 years ago
- A package to create HTML MISP reports, including volume of trending events and attributes, evens received from key organisations and targ…☆12Oct 9, 2026Updated last week
- ☆22Apr 10, 2025Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- TokenSmith generates Entra ID access & refresh tokens on offensive engagements. It is suitable for both covert adversary simulations and …☆423Jan 23, 2025Updated last year
- Run TTPs, with AI!☆143Feb 23, 2026Updated 7 months ago
- NoDelete is a tool that assists in malware analysis by locking a folder where malware drops files before deleting them.☆49Nov 17, 2025Updated 11 months ago
- Examine Chrome extensions for security issues☆100Nov 16, 2025Updated 11 months ago
- Repository documenting how Threat Intelligence and / or a Threat Intelligence Platform can prove its value to an organisation.☆54Oct 23, 2024Updated last year
- A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data int…☆2,571Updated this week
- Adversarial Detection Engineering knowledge base — ADE taxonomy, worked technique files, platform bug patterns, mitigations, and purple-t…☆80Sep 30, 2026Updated 2 weeks ago
- gpoParser is a tool designed to extract and analyze configurations applied through Group Policy Objects (GPOs) in an Active Directory env…☆379Apr 28, 2026Updated 5 months ago
- BOF to decrypt Signal Desktop chat logs☆69Feb 20, 2025Updated last year
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- MasterParser is a powerful DFIR tool designed for analyzing and parsing Linux logs☆762Feb 1, 2026Updated 8 months ago
- Hundred Days of Yara Challenge☆12Jun 21, 2022Updated 4 years ago
- BCP documents and website of GCVE☆58Oct 6, 2026Updated last week
- Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.☆3,402Updated this week
- A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID☆677Oct 11, 2026Updated last week
- An ADCS honeypot to catch attackers in your internal network.☆338Jun 27, 2024Updated 2 years ago
- An open source platform to support analysts to organise their case and tasks☆165Sep 24, 2026Updated 3 weeks ago