CrowdStrike Falcon Queries For Advanced Threat Detection
☆37Mar 1, 2025Updated last year
Alternatives and similar repositories for CrowdStrike-Queries
Users that are interested in CrowdStrike-Queries are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆14Jan 2, 2025Updated last year
- CQL Hub is an open repository of detection and hunting queries for CrowdStrike NextGen SIEM and Falcon LogScale. All queries stored here …☆75Jul 10, 2026Updated 2 weeks ago
- A small bash script that allows remote oscap scanning through ssh, similar to what SCAP Workbench does.☆11Apr 18, 2015Updated 11 years ago
- This repository contains Community and Field contributed content for LogScale☆344May 11, 2026Updated 2 months ago
- Monitoring Monster (MonMon) is a monitoring tool for bug bounty hunters. It tracks changes across subdomains, HTTP endpoints, shell com…☆43Apr 7, 2026Updated 3 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- List of helpful publicly available CrowdStrike material.☆61Nov 14, 2024Updated last year
- Terraform scripts for deploying OpenCTI to AWS, Azure, and GCP☆34Apr 2, 2024Updated 2 years ago
- This project is demonstration of creating an active directory (AD) home lab on VMware. I will be creating a Domain Controller and a domai…☆10May 12, 2024Updated 2 years ago
- Crowdstrike response script containing various functions for IR/triage☆13Dec 7, 2020Updated 5 years ago
- A modular tool to search for known vulnerabilities, exploits and more across various data sources☆92Jul 22, 2026Updated last week
- Application Security Mind Maps☆12Apr 10, 2021Updated 5 years ago
- Repo for some CrowdStrike Falcon Real-Time-Response PowerShell scripts☆16Oct 24, 2022Updated 3 years ago
- This repository contains detection and threat hunting queries created by NVISO’s CSIRT and SOC teams.☆17Jun 25, 2026Updated last month
- Sigma Queries turned into KQL for Defender using pysigma☆12Mar 29, 2026Updated 4 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Pester infrastructure checks for ActiveDirectory☆26Jul 10, 2019Updated 7 years ago
- First-ever decryptor for The Gentlemen ransomware — recovers encryption keys from process memory dumps using X25519 ephemeral key extract…☆30May 21, 2026Updated 2 months ago
- ☆15Apr 10, 2025Updated last year
- HTTP based framework for building command and control components for remote access trojans☆15Aug 2, 2021Updated 4 years ago
- Piper Burp Suite Extender plugin☆17Jan 15, 2026Updated 6 months ago
- GitHub landing page repo☆12May 14, 2026Updated 2 months ago
- Hunting queries and detections☆918May 7, 2026Updated 2 months ago
- Alternative password shadowing scheme☆10Jul 20, 2026Updated last week
- ☆114Jan 31, 2024Updated 2 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- ☆11Feb 9, 2023Updated 3 years ago
- ☆47Updated this week
- A collection of CQL hunting leads for CrowdStrike Falcon and LogScale, mapped to the MITRE ATT&CK framework.☆35May 25, 2026Updated 2 months ago
- Perform file-based malware scan on your on-prem servers with AWS☆14Oct 31, 2023Updated 2 years ago
- ☆15Oct 13, 2025Updated 9 months ago
- ☆12Jul 15, 2022Updated 4 years ago
- 🌌 Real-time threat detection for smart contracts☆10May 16, 2023Updated 3 years ago
- Identifies defensive gaps in security posture by leveraging Mitre's ATT&CK framework. #nsacyber☆164May 11, 2020Updated 6 years ago
- Malware detonation platform Polygon integration☆10Aug 1, 2023Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- The Enhanced MITRE ATT&CK® Coverage Tracker is an Excel tool for SOCs to measure and improve detection coverage of cyber threats. It simp…☆36Nov 13, 2025Updated 8 months ago
- The Waf build system☆17Oct 10, 2024Updated last year
- Vite Arbitrary File Read Exploit☆15Jun 25, 2025Updated last year
- This repository contains sample log data that were collected after running adversary simulations in Microsoft 365☆24Oct 9, 2024Updated last year
- Event Query Router☆12Aug 9, 2019Updated 6 years ago
- A small collection of scripts that are useful for implementing Domain Fronting in an assessment.☆13Apr 25, 2019Updated 7 years ago
- Generate bulk YARA rules from YAML input☆22Feb 3, 2020Updated 6 years ago