CrowdStrike Falcon Queries For Advanced Threat Detection
☆39Mar 1, 2025Updated last year
Alternatives and similar repositories for CrowdStrike-Queries
Users that are interested in CrowdStrike-Queries are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆14Jan 2, 2025Updated last year
- CQL Hub is an open repository of detection and hunting queries for CrowdStrike NextGen SIEM and Falcon LogScale. All queries stored here …☆84Sep 14, 2026Updated 2 weeks ago
- A small bash script that allows remote oscap scanning through ssh, similar to what SCAP Workbench does.☆11Apr 18, 2015Updated 11 years ago
- Terraform scripts for deploying OpenCTI to AWS, Azure, and GCP☆34Apr 2, 2024Updated 2 years ago
- This project is demonstration of creating an active directory (AD) home lab on VMware. I will be creating a Domain Controller and a domai…☆10May 12, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- AI-maintained security annotations for code. Continuous threat modeling, enforced in CI.☆19Sep 17, 2026Updated last week
- Repo for some CrowdStrike Falcon Real-Time-Response PowerShell scripts☆16Oct 24, 2022Updated 3 years ago
- This repository contains detection and threat hunting queries created by NVISO’s CSIRT and SOC teams.☆20Jun 25, 2026Updated 3 months ago
- Cyber | Cloud Security Checklist | Incident Response | Policy Template | Use cases☆13Nov 24, 2020Updated 5 years ago
- Sigma Queries turned into KQL for Defender using pysigma☆12Mar 29, 2026Updated 5 months ago
- Pester infrastructure checks for ActiveDirectory☆26Jul 10, 2019Updated 7 years ago
- ☆15Apr 10, 2025Updated last year
- HTTP based framework for building command and control components for remote access trojans☆15Aug 2, 2021Updated 5 years ago
- GitHub landing page repo☆12May 14, 2026Updated 4 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Hunting queries and detections☆924May 7, 2026Updated 4 months ago
- Alternative password shadowing scheme☆12Aug 1, 2026Updated last month
- ☆11Feb 9, 2023Updated 3 years ago
- ☆52Updated this week
- A collection of CQL hunting leads for CrowdStrike Falcon and LogScale, mapped to the MITRE ATT&CK framework.☆35Sep 8, 2026Updated 2 weeks ago
- Command-line tool to identify useragents that bypasses proxy restrictions☆13Oct 23, 2025Updated 11 months ago
- Perform file-based malware scan on your on-prem servers with AWS☆14Oct 31, 2023Updated 2 years ago
- ☆16Oct 13, 2025Updated 11 months ago
- ☆12Jul 15, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 🌌 Real-time threat detection for smart contracts☆10May 16, 2023Updated 3 years ago
- Identifies defensive gaps in security posture by leveraging Mitre's ATT&CK framework. #nsacyber☆162May 11, 2020Updated 6 years ago
- The Enhanced MITRE ATT&CK® Coverage Tracker is an Excel tool for SOCs to measure and improve detection coverage of cyber threats. It simp…☆36Nov 13, 2025Updated 10 months ago
- The Waf build system☆18Oct 10, 2024Updated last year
- Event Query Router☆12Aug 9, 2019Updated 7 years ago
- A small collection of scripts that are useful for implementing Domain Fronting in an assessment.☆13Apr 25, 2019Updated 7 years ago
- Generate bulk YARA rules from YAML input☆22Feb 3, 2020Updated 6 years ago
- NessusV2 File Parser☆70Apr 21, 2026Updated 5 months ago
- Collection of useful, up to date, Carbon Black Response Queries☆87Oct 23, 2020Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆10Jul 10, 2022Updated 4 years ago
- OpenCTI–Wazuh connector looking for indicators in Wazuh and creating sightings☆25Aug 13, 2024Updated 2 years ago
- Versatile tool for managing wordlists☆11Jul 15, 2021Updated 5 years ago
- Generate representative samples from Pwned Passwords (HIBP)☆11Jan 6, 2022Updated 4 years ago
- ☆20Feb 13, 2026Updated 7 months ago
- CLI Search for Security Operators of MITRE ATT&CK URLs☆17Jan 5, 2023Updated 3 years ago
- Queries for Carbon Black Response☆11Feb 11, 2020Updated 6 years ago