CrowdStrike Falcon Queries For Advanced Threat Detection
☆40Mar 1, 2025Updated last year
Alternatives and similar repositories for CrowdStrike-Queries
Users that are interested in CrowdStrike-Queries are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆14Jan 2, 2025Updated last year
- A collection of Splunk's Search Processing Language (SPL) for Threat Hunting with CrowdStrike Falcon☆221May 23, 2020Updated 6 years ago
- CQL Hub is an open repository of detection and hunting queries for CrowdStrike NextGen SIEM and Falcon LogScale. All queries stored here …☆86Sep 29, 2026Updated 2 weeks ago
- A small bash script that allows remote oscap scanning through ssh, similar to what SCAP Workbench does.☆11Apr 18, 2015Updated 11 years ago
- This repository contains Community and Field contributed content for LogScale☆354Sep 15, 2026Updated last month
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- List of helpful publicly available CrowdStrike material.☆61Nov 14, 2024Updated last year
- Terraform scripts for deploying OpenCTI to AWS, Azure, and GCP☆34Apr 2, 2024Updated 2 years ago
- Crowdstrike response script containing various functions for IR/triage☆13Dec 7, 2020Updated 5 years ago
- Cyber | Cloud Security Checklist | Incident Response | Policy Template | Use cases☆13Nov 24, 2020Updated 5 years ago
- First-ever decryptor for The Gentlemen ransomware — recovers encryption keys from process memory dumps using X25519 ephemeral key extract…☆31May 21, 2026Updated 4 months ago
- This repository contains detection and threat hunting queries created by NVISO’s CSIRT and SOC teams.☆20Jun 25, 2026Updated 3 months ago
- Pester infrastructure checks for ActiveDirectory☆26Jul 10, 2019Updated 7 years ago
- Sigma Queries turned into KQL for Defender using pysigma☆12Mar 29, 2026Updated 6 months ago
- HTTP based framework for building command and control components for remote access trojans☆15Aug 2, 2021Updated 5 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆15Apr 10, 2025Updated last year
- GitHub landing page repo☆12May 14, 2026Updated 5 months ago
- Hunting queries and detections☆927May 7, 2026Updated 5 months ago
- This is the integration to feed Falcon X IOC data into zscaler's platform☆21Oct 13, 2025Updated last year
- ☆55Updated this week
- ☆16Aug 31, 2018Updated 8 years ago
- ☆16Oct 13, 2025Updated last year
- ☆12Jul 15, 2022Updated 4 years ago
- Vite Arbitrary File Read Exploit☆15Jun 25, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆11Feb 9, 2023Updated 3 years ago
- Generate bulk YARA rules from YAML input☆22Feb 3, 2020Updated 6 years ago
- The Enhanced MITRE ATT&CK® Coverage Tracker is an Excel tool for SOCs to measure and improve detection coverage of cyber threats. It simp…☆36Nov 13, 2025Updated 11 months ago
- ☆10Jul 10, 2022Updated 4 years ago
- Perform file-based malware scan on your on-prem servers with AWS☆14Oct 31, 2023Updated 2 years ago
- OpenCTI–Wazuh connector looking for indicators in Wazuh and creating sightings☆25Aug 13, 2024Updated 2 years ago
- Collection of useful, up to date, Carbon Black Response Queries☆87Oct 23, 2020Updated 5 years ago
- 🌌 Real-time threat detection for smart contracts☆10May 16, 2023Updated 3 years ago
- Versatile tool for managing wordlists☆11Jul 15, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Data Driven Threat Hunting on the RaspberryPi☆32Jan 26, 2022Updated 4 years ago
- A skill to help cybersecurity folks update and tweak their resume☆185Sep 20, 2026Updated 3 weeks ago
- ☆47Oct 6, 2026Updated last week
- Event Query Router☆12Aug 9, 2019Updated 7 years ago
- This directory contains random scripts from threat hunting or malware research☆11Feb 15, 2018Updated 8 years ago
- This repo hosts multiple codes, content, checklists etc which can help a penetration tester in a web application auditing.☆22Sep 14, 2023Updated 3 years ago
- Spin up a fully configured, host‑only malware analysis lab with FlareVM, REMnux or CAPE Sandbox using a few repeatable commands.☆36Aug 15, 2026Updated 2 months ago