Blackhat 2025 presentation and codebase: AI SOC agent & MCP server for automated security investigation, alert triage, and incident response. Integrates with ELK, IRIS, and other platforms.
☆48Dec 28, 2025Updated 8 months ago
Alternatives and similar repositories for AI-SOC-Agent
Users that are interested in AI-SOC-Agent are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Automate the build of a vulnerable AD environment.☆41Aug 19, 2022Updated 4 years ago
- ☆27Apr 28, 2026Updated 4 months ago
- A multi-agent SOC/DFIR assistant powered by LangChain, LangGraph, and OpenAI models. Automates IOC extraction, MITRE ATT&CK mapping, CVE …☆82Apr 2, 2026Updated 5 months ago
- MLOps Attack Toolkit in Python☆16Feb 20, 2026Updated 6 months ago
- Async port/ping scanner BOF. Supports IP/port ranges, CIDR notation and hostnames.☆17Jul 23, 2026Updated last month
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- A minimal, modular MCP server that equips your AI with practical capabilities for real-world threat hunting workflows.☆19Apr 26, 2026Updated 4 months ago
- AI-driven automated threat analysis pipeline that routes files, URLs, IPs, domains, or images through specialized security analyzers and …☆20Mar 9, 2026Updated 5 months ago
- AD ACL Abuser for Havoc C2☆25Mar 30, 2026Updated 5 months ago
- AI-powered SOC for OT/ICS networks — 6 autonomous agents, MITRE ATT&CK mapping, Suricata/Zeek ingestion, human-in-the-loop response, 330+…☆33Aug 6, 2026Updated last month
- Evasive loader for .NET Framework assemblies☆52May 14, 2026Updated 3 months ago
- Tool that gathers a customizable set of ETW telemetry and generates user-defined detections☆56Jan 28, 2026Updated 7 months ago
- DPAPI research and offensive tools☆17Feb 12, 2026Updated 6 months ago
- ☆21Dec 29, 2024Updated last year
- Open-source collaborative note-taking platform for cybersecurity and CTI teams. IOC auto-extraction, STIX 2.1 export, real-time ed…☆23Apr 6, 2026Updated 5 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Shellcode injection using debugging APIs☆19Jan 13, 2014Updated 12 years ago
- A Burp Suite extension that detects, catalogs, and exports developer comments, secrets, and keywords embedded in both HTTP response bodie…☆19Sep 18, 2025Updated 11 months ago
- Agentic SOC Platform: A powerful, flexible, open-source, and agent-centric automated security operations platform (AI SOC)☆1,170Aug 5, 2026Updated last month
- ☆12Apr 23, 2019Updated 7 years ago
- The tool is used to create a local webserver and force authenticate, which captures the logged in users NTLM v2 hash.☆16Feb 17, 2026Updated 6 months ago
- Go package for fexecve(3) and execveat(2)☆16Mar 4, 2026Updated 6 months ago
- Top 2025 Vulnerabilities You Shouldn’t Accept in a Pentest Report☆14Feb 6, 2025Updated last year
- Windows kernel driver exploitation knowledge base — 28 case studies organized by driver type, grounded in real CVEs with build numbers an…☆56Updated this week
- Burp Suite Pro extension☆11May 26, 2017Updated 9 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Curated Linux LPE corpus — 28 modules from 2016 to 2026, with detection rules. One command, safest-first root: skeletonkey --auto --i-kno…☆25Updated this week
- Proof-of-Concept to evade auditd by tampering via ptrace☆19Aug 3, 2023Updated 3 years ago
- ☆14Aug 10, 2022Updated 4 years ago
- DevSecOps for the AI-era CI/CD pipeline. Catches the bugs your AI coding assistant introduces — before they reach production.☆20Aug 29, 2026Updated last week
- DFIR Presentations☆16Apr 24, 2026Updated 4 months ago
- Red Team Techniques & TTPs: AD, C2, SCADA, PrivEsc, Web Hacking, Buffer Overflow, WiFi.☆18Updated this week
- ☆18Sep 10, 2021Updated 4 years ago
- The CIA Compliance Manager is an application that helps organizations assess and manage the availability, integrity, and confidentiality …☆21Updated this week
- Azure Blob Storage C2 Profile for Mythic☆30Jan 30, 2026Updated 7 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆89Updated this week
- a Python client to query the FIRST EPSS API☆11Sep 13, 2023Updated 2 years ago
- A GO module of the Security Content Automation Protocol (SCAP) Specification☆17Dec 1, 2025Updated 9 months ago
- A BOF designed to inspect processes memory and addresses☆40Apr 19, 2026Updated 4 months ago
- The book and code repo for the FREE Fundamental C++ book by Kevin Thomas.☆21Nov 26, 2025Updated 9 months ago
- DeepProbe - Memory Forensics Framework☆16May 16, 2026Updated 3 months ago
- Curso realizado por Ricardo Narvaja de CrackLatinos (Mirror) http://ricardonarvaja.info☆12May 28, 2018Updated 8 years ago