Nebulock-Inc / agentic-threat-hunting-frameworkLinks
ATHF is a framework for agentic threat hunting - building systems that can remember, learn, and act with increasing autonomy.
☆167Updated this week
Alternatives and similar repositories for agentic-threat-hunting-framework
Users that are interested in agentic-threat-hunting-framework are comparing it to the libraries listed below
Sorting:
- Build AI-powered security tools. 50+ hands-on labs covering ML, LLMs, RAG, threat detection, DFIR, and red teaming. Includes Colab notebo…☆66Updated this week
- Proximity is a MCP security scanner powered with NOVA☆269Updated 4 months ago
- Inboxfuscation is an advanced offensive & defensive framework for mailbox rule obfuscation and detection in Exchange environments.☆79Updated 4 months ago
- A tool for mapping cyber crime☆236Updated this week
- This is a repository to experiment with MCP for security☆45Updated last year
- A knowledge source about TTPs used to target GenAI-based systems, copilots and agents☆133Updated last month
- ☆239Updated last month
- Raw data from Threat Intelligence Reports with automatic reports collection and keyword search across thousands of reports☆147Updated last week
- CRADLE is a collaborative platform for Cyber Threat Intelligence analysts. It streamlines threat investigations with integrated note-taki…☆337Updated this week
- ☆20Updated 9 months ago
- MCP to help Defenders Detection Engineer Harder and Smarter☆118Updated this week
- Have you ever wanted to search a link or IP address on multiple OSINT pages at once?☆59Updated 6 months ago
- Cyber threat intelligence tool suite.☆42Updated 9 months ago
- Hands-on MCP security lab: 10 real incidents reproduced with vulnerable/secure MCP servers, pytest regressions, and Claude/Cursor battle-…☆81Updated last month
- AI / LLM Red Team Field Manual & Consultant’s Handbook☆229Updated this week
- TTPMapper is an AI-driven threat intelligence parser that converts unstructured reports whether from web URLs or PDF files into structure…☆48Updated 7 months ago
- This is the repository for indicators of compromise (IOCs) and other data for threat intelligence articles posted on the Palo Alto Networ…☆111Updated 2 months ago
- A curated collection of DFIR skills and workflows for InfoSec practitioners.☆236Updated last week
- A comprehensive GenAI protection system designed to protect against malicious prompts, injection attacks, and harmful content. System inc…☆95Updated 3 months ago
- Security automation with n8n ideas: 100+ Red/Blue/AppSec workflows, integrations, and ready-to-run playbooks.☆462Updated 4 months ago
- Jupyter Univere is a search engine for all infosec jupyter notebooks☆34Updated 10 months ago
- Finding ClickFix and FakeCAPTCHA like it's 1999☆120Updated this week
- ☆74Updated last week
- Segugio allows the execution and tracking of critical steps in the malware detonation process, from clicking on the first stage to extrac…☆151Updated last year
- The LOLBins CTI-Driven (Living-Off-the-Land Binaries Cyber Threat Intelligence Driven) is a project that aims to help cyber defenders und…☆126Updated last year
- SECurityTr8Ker monitors the SEC's RSS feed for 8-K filings with cybersecurity incident disclosures.☆90Updated 7 months ago
- Framework for Monitoring File Ingestion Source for Yara Matches☆50Updated 10 months ago
- Living Off Security Tools☆58Updated 2 months ago
- Mapping of open-source detection rules and atomic tests.☆193Updated last year
- An index of publicly available and open-source threat detection rulesets.☆131Updated 9 months ago