Recon Hunt Queries
☆78May 16, 2021Updated 5 years ago
Alternatives and similar repositories for rhq
Users that are interested in rhq are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Collection of operational focused osquery dashboards.☆10Jan 20, 2021Updated 5 years ago
- Threat hunting repo for my independent study on threat hunting with OSQuery☆27Jan 16, 2018Updated 8 years ago
- Threat Hunting & Incident Investigation with Osquery☆216Mar 30, 2022Updated 4 years ago
- PyVelociraptor contains the python bindings for the Velociraptor API.☆23May 5, 2026Updated 5 months ago
- MasterParser is a simple, all-in-one, digital forensics artifact parser☆24Jul 9, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A Splunk technology add-on for osquery☆14Sep 5, 2025Updated last year
- Creates an ATT&CK Navigator map of an Adversary Emulation Plan☆17Sep 4, 2021Updated 5 years ago
- Detection Ideas & Rules repository.☆179Sep 10, 2021Updated 5 years ago
- Repo with supporting material for the talk titled "Cracking the Beacon: Automating the extraction of implant configurations"☆11Feb 6, 2025Updated last year
- The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted driv…☆347Jun 25, 2022Updated 4 years ago
- ☆18May 23, 2024Updated 2 years ago
- A collection of Terraform and Ansible scripts that automatically (and quickly) deploys a small Velociraptor R&D lab.☆23Apr 16, 2021Updated 5 years ago
- ☆18Oct 24, 2024Updated 2 years ago
- Create alerts in The Hive from your Graylog alerts, to be turned into Hive cases.☆45Aug 17, 2020Updated 6 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Triage automation for suspect URLs☆13Jul 23, 2019Updated 7 years ago
- Kibana app for RedELK☆17Mar 19, 2023Updated 3 years ago
- Library of threat hunts to get any user started!☆51Sep 4, 2020Updated 6 years ago
- Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux☆519Oct 21, 2022Updated 4 years ago
- Cloud Templates and scripts to deploy mordor environments☆129Mar 3, 2021Updated 5 years ago
- Automatic detection engineering technical state compliance☆55Jul 7, 2024Updated 2 years ago
- A repository for using osquery for incident detection and response☆906Oct 2, 2026Updated 3 weeks ago
- Ansible playbook to convert Sigma rules to ElastAlert rules☆10Feb 5, 2021Updated 5 years ago
- Event Trace Log file parser in pure Python☆157May 20, 2026Updated 5 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Searches For Threat Hunting and Security Analytics☆238Mar 26, 2025Updated last year
- Splunk Add-on for PowerShell provides field extraction for PowerShell event logs.☆17Feb 1, 2021Updated 5 years ago
- A Python library to help with some common threat hunting data analysis operations☆141Apr 23, 2023Updated 3 years ago
- Notebooks created to attack and secure Active Directory environments☆26Nov 18, 2019Updated 6 years ago
- Open Source Security Events Metadata (OSSEM)☆1,302Feb 27, 2023Updated 3 years ago
- OSSEM Modular☆27Jun 29, 2020Updated 6 years ago
- A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns by leveraging Windows Events and Sys…☆11Apr 13, 2017Updated 9 years ago
- This script is made to collect the most valiable artifacts for foreniscs or incident reponse investigation rather than imaging the whole …☆217Oct 19, 2020Updated 6 years ago
- A flexible control server for osquery fleets☆1,098Dec 15, 2020Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Implementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.☆216Jul 21, 2022Updated 4 years ago
- ☆20Oct 23, 2020Updated 6 years ago
- DFIRTrack - The Incident Response Tracking Application☆540Jan 13, 2026Updated 9 months ago
- A specialized environment for crafting, validating, and testing LimaCharlie detection rules☆15Oct 16, 2026Updated last week
- A framework for developing alerting and detection strategies for incident response.☆922Oct 2, 2026Updated 3 weeks ago
- Registry to JSON. This Project is for learning purposes and is not maintained.☆12Dec 28, 2021Updated 4 years ago
- Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).☆831Oct 21, 2026Updated last week