Security Content for the PEAK Threat Hunting Framework
☆51Aug 9, 2026Updated 2 months ago
Alternatives and similar repositories for PEAK
Users that are interested in PEAK are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆17Aug 27, 2026Updated 2 months ago
- Default-deny MCP/JSON-RPC security gateway for agent tool-call authorization, prompt-injection detection, exfiltration controls, and audi…☆17Updated this week
- A framework for developing alerting and detection strategies for incident response.☆10Mar 26, 2024Updated 2 years ago
- Anvilogic Forge☆119Mar 31, 2026Updated 7 months ago
- Datasets from the Sophos Active Adversary Report☆14Feb 24, 2026Updated 8 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Automated Cloud Misconfiguration Testing☆26Jun 20, 2025Updated last year
- This repo represents work the Phantom Community collaborates on to build apps and learn.☆14May 18, 2021Updated 5 years ago
- tool to extract LSA credentials using a vulnerable microsoft signed windows defender driver in a stealthy manner☆19Apr 12, 2026Updated 6 months ago
- A Threat-Actor explorer (browser-local) from the MISP galaxy dataset☆19Updated this week
- Sharing Threat Hunting runbooks☆28Jul 5, 2019Updated 7 years ago
- Mapping of open-source detection rules and atomic tests.☆217Jul 15, 2026Updated 3 months ago
- Browser extension blocking scam and phishing pages https://chromewebstore.google.com/detail/nehboro/ljgklnaofelbcnegjniagpmjknkmaiom☆17Apr 22, 2026Updated 6 months ago
- Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.☆13Updated this week
- ☆88Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Summiting the Pyramid is a research project focused on engineering cyber analytics to make adversary evasion more difficult. The research…☆69Sep 29, 2026Updated last month
- Assemblyline 4 Malware detonation service (CAPEv2)☆13Oct 22, 2026Updated last week
- Cobalt Strike notifications via NTFY.☆15Sep 24, 2024Updated 2 years ago
- LLM benchmark results for THOR forensic finding triage quality☆28Oct 23, 2026Updated last week
- A framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concret…☆65Sep 28, 2026Updated last month
- This repository contains hands-on Jupyter notebooks for learning threat intelligence analysis using CIRCL's open source tools and service…☆13Dec 12, 2025Updated 10 months ago
- Aggregated ATT&CK technique reporting data. Presented at Splunk GovSummit December 2022☆19Jul 18, 2025Updated last year
- ☆47Nov 29, 2024Updated last year
- From Chaos to Clarity. Turning Raw Windows Logs into Executive Insights. Looking for Indicators of Compromise.☆47Oct 20, 2025Updated last year
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- ☆13Sep 13, 2026Updated last month
- Awesome list of keywords and artifacts for Threat Hunting sessions☆682Aug 4, 2025Updated last year
- ThreatCheck - Select any indicator of compromise on any web page - or highlight an entire paragraph from a threat report - and instantly …☆35May 6, 2026Updated 5 months ago
- Threat Hunting with Jupyter Notebooks on Taegis☆14Sep 25, 2023Updated 3 years ago
- Generate YARA rules for OOXML documents.☆38Jun 1, 2023Updated 3 years ago
- A simple command line program to help defender test their detections for network beacon patterns and domain fronting☆68Feb 3, 2022Updated 4 years ago
- [ARCHIVED] Engine is now OpenTideHQ/opentide — DetectionOps as a package☆38Sep 9, 2026Updated last month
- An AI-backed threat hunting assistant that aligns to the PEAK framework.☆65Jun 1, 2026Updated 4 months ago
- The Measure, Maximize, and Mature Threat-Informed Defense (M3TID) project defines what Threat-Informed Defense (TID) is and the key activ…☆17Jun 25, 2025Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Adversarial Detection Engineering knowledge base — ADE taxonomy, worked technique files, platform bug patterns, mitigations, and purple-t…☆88Sep 30, 2026Updated last month
- A preconfigured Velociraptor triage collector☆79Oct 19, 2026Updated last week
- SOC Cockpit is a web-based operational command console for SOC (Security Operations Center) managers. It is designed around dense, shared…☆30Updated this week
- Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise☆69Jul 2, 2026Updated 3 months ago
- ☆28Oct 22, 2026Updated last week
- Sigma detection rules for hunting with the threathunting-keywords project☆61Mar 2, 2025Updated last year
- An AWS CloudTrail exported logs analyzer tool☆21Oct 7, 2026Updated 3 weeks ago