Neo23x0 / Loki2

Related projects ⓘ

Alternatives and complementary repositories for Loki2

• AttackIQ / SigmAIQ
  A pySigma wrapper and langchain toolkit for automatic rule creation/translation
  ☆66Updated last week
• magicsword-io / sigconverter.io
  An opensource sigma conversion tool built using pysigma
  ☆101Updated this week
• center-for-threat-informed-defense / attack-powered-suit
  ATT&CK Powered Suit is a browser extension that puts the complete MITRE ATT&CK® knowledge base at your fingertips with text search, conte…
  ☆73Updated 2 weeks ago
• YARAHQ / yara-forge
  Automated YARA Rule Standardization and Quality Assurance Tool
  ☆166Updated last week
• mbabinski / Sigma-Rules
  A repository of my own Sigma detection rules.
  ☆156Updated 2 months ago
• MISP / misp-playbooks
  MISP Playbooks
  ☆174Updated this week
• The-DFIR-Report / Sigma-Rules
  Rules generated from our investigations.
  ☆189Updated 3 weeks ago
• tsale / Sigma_rules
  Sigma rules to share with the community
  ☆115Updated 2 months ago
• korniko98 / pivot-atlas
  ☆83Updated 3 months ago
• UncoderIO / Uncoder_IO
  An IDE and translation engine for detection engineers and threat hunters. Be faster, write smarter, keep 100% privacy.
  ☆131Updated this week
• NextronSystems / CyberChef
  CyberChef - Detection Engineering, TI, DFIR, Malware Analysis Edition
  ☆62Updated 2 years ago
• blackberry / threat-research-and-intelligence
  BlackBerry Threat Research & Intelligence
  ☆93Updated last year
• mf1d3l / Splunk4DFIR
  Harness the power of Splunk for your investigations
  ☆77Updated last week
• mgreen27 / DetectRaptor
  A repository to share publicly available Velociraptor detection content
  ☆119Updated last week
• SigmaHQ / sigma-cli
  The Sigma command line interface based on pySigma
  ☆136Updated 3 months ago
• darkquasar / AIMOD2
  Adversarial Interception Mission Oriented Discovery and Disruption Framework, or AIMOD2, is a structured threat hunting approach to proac…
  ☆85Updated last year
• west-wind / Threat-Hunting-With-Splunk
  Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise
  ☆57Updated 6 months ago
• The-DFIR-Report / Yara-Rules
  ☆61Updated this week
• swimlane / atomic-operator
  A Python package is used to execute Atomic Red Team tests (Atomics) across multiple operating system environments.
  ☆136Updated 4 months ago
• Yamato-Security / hayabusa-rules
  Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.
  ☆144Updated this week
• NextronSystems / evtx-baseline
  A repository hosting example goodware evtx logs containing sample software installation and basic user interaction
  ☆68Updated last year
• swisscom / ArtifactCollectionMatrix
  Forensic Artifact Collection Tool Matrix
  ☆75Updated 2 weeks ago
• magicsword-io / LOLRMM
  LotL RMM
  ☆101Updated last week
• yarox24 / EvtxHussar
  Initial triage of Windows Event logs
  ☆89Updated 5 months ago
• CrowdStrike / SuperMem
  A python script developed to process Windows memory images based on triage type.
  ☆258Updated 11 months ago
• Neo23x0 / yaraQA
  YARA rule analyzer to improve rule quality and performance
  ☆93Updated last year
• curated-intel / Threat-Actor-Profile-Guide
  The Threat Actor Profile Guide for CTI Analysts
  ☆98Updated last year
• hashlookup / hashlookup-forensic-analyser
  Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service - https…
  ☆125Updated last year
• theflakes / reg_hunter
  Blueteam operational triage registry hunting/forensic tool.
  ☆142Updated last year
• fr0gger / jupyter-collection
  Collection of Jupyter Notebooks by @fr0gger_
  ☆142Updated 2 months ago