Open source HIDS tailored for Microsoft Windows and Active Directory
☆31Jul 23, 2026Updated this week
Alternatives and similar repositories for Saeros
Users that are interested in Saeros are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Cyber threat intelligence tool suite.☆41Apr 3, 2025Updated last year
- Storage for the IOCs I collect☆11Apr 3, 2026Updated 3 months ago
- ☆13Mar 11, 2026Updated 4 months ago
- Security Scripts and Sources for daily usage.☆76May 26, 2026Updated 2 months ago
- Pritunl Access Control System☆11Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- NoDelete is a tool that assists in malware analysis by locking a folder where malware drops files before deleting them.☆50Nov 17, 2025Updated 8 months ago
- Aftermath is a free macOS incident response framework☆34Sep 25, 2025Updated 10 months ago
- ☆16Dec 25, 2025Updated 7 months ago
- Windows forensics Engine☆109Updated this week
- ☆24Mar 4, 2025Updated last year
- A source-available command-line tool for cybersecurity reporting☆71Updated this week
- Automating Active Directory Tiering☆28Oct 7, 2025Updated 9 months ago
- Analyst tool for creating pivot maps of data sources☆16Sep 11, 2017Updated 8 years ago
- DetectPack Forge turns plain-English behaviors or sample logs into production-ready detection packs — Sigma, KQL (Sentinel), SPL (Splunk)…☆24Mar 19, 2026Updated 4 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- .NET tool used to enrich RPC telemetry☆103Jan 24, 2026Updated 6 months ago
- Active Directory Penetration Testing Tool☆39Jun 2, 2024Updated 2 years ago
- The ultimate repository for remotely deploying Crowdstrike sensors quickly and discreetly on any other EDR platform.☆26Aug 12, 2025Updated 11 months ago
- Research indicators and detection rules☆69Sep 20, 2023Updated 2 years ago
- GenAI-STIX2.1-Generator is a tool that leverages Azure OpenAI capabilities to transform threat intelligence reports from unstructured web…☆24Mar 24, 2025Updated last year
- Interactive PowerShell framework for testing WMI, COM, LOLBAS, and persistence techniques☆130Dec 28, 2025Updated 7 months ago
- Mentally ill EtwTi parser☆75Jan 11, 2026Updated 6 months ago
- This technique leverages PowerShell's .NET interop layer and COM automation to achieve stealthy command execution by abusing implicit typ…☆54May 16, 2025Updated last year
- Microsoft Sentinel related content☆38Jan 22, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- HoneyWire: The Open-Source, Unlimited Deception Platform. Turn any Linux machine into an enterprise-grade canary in 60 seconds.☆96Jul 19, 2026Updated last week
- An extensible, deterministic static‑analysis engine that extracts high‑signal IOCs from PE binaries and text, built for SOC automation an…☆27Jul 1, 2026Updated 3 weeks ago
- A powerful, self-extending MCP server for dynamic AI tool orchestration. Features sandboxed JS execution, capability-based security, auto…☆25Jun 12, 2026Updated last month
- 🛡️Awesome lists about all kinds of interesting topics of Wazuh XDR/SIEM☆133Jul 21, 2026Updated last week
- ☆20Oct 23, 2020Updated 5 years ago
- Patched Bash 3.2.24 to log all actions to syslog☆13Dec 16, 2017Updated 8 years ago
- Helper utility to selectively apply changes between developer and production FIM2010 servers☆20Oct 11, 2018Updated 7 years ago
- A sysmon configuration designed for monitoring RMM solutions from the LOLRMM framework on the OS Microsoft Windows. 10/11☆33Feb 17, 2026Updated 5 months ago
- Zeek package to generate a SMB client fingerprint☆27May 5, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- CRADLE is a collaborative platform for Cyber Threat Intelligence analysts. It streamlines threat investigations with integrated note-taki…☆344May 18, 2026Updated 2 months ago
- ☆43May 22, 2021Updated 5 years ago
- Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code an…☆57Updated this week
- This is the offical Repository for the Access Package Builder Web App.☆21Apr 17, 2026Updated 3 months ago
- An extendable tool to extract and aggregate IoCs from threat feeds☆33Feb 6, 2024Updated 2 years ago
- Windows EVTX log analysis for DFIR — fast parsing, ATT&CK mapping, IOC extraction, and Sentinel anomaly detection. Normal + Juggernaut Mo…☆54Jul 21, 2026Updated last week
- Manage your homelab with one tool: WireGuard VPN, split-horizon DNS, HAProxy reverse proxy with automatic wildcard SSL, and service monit…☆39Updated this week