Open source HIDS tailored for Microsoft Windows and Active Directory
☆31Jul 23, 2026Updated 2 months ago
Alternatives and similar repositories for Saeros
Users that are interested in Saeros are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Cyber threat intelligence tool suite.☆41Apr 3, 2025Updated last year
- Storage for the IOCs I collect☆11Apr 3, 2026Updated 6 months ago
- Security Scripts and Sources for daily usage.☆77May 26, 2026Updated 4 months ago
- Pritunl Access Control System☆11Jul 28, 2026Updated 2 months ago
- NoDelete is a tool that assists in malware analysis by locking a folder where malware drops files before deleting them.☆49Nov 17, 2025Updated 11 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Aftermath is a free macOS incident response framework☆34Sep 25, 2025Updated last year
- ☆19Dec 25, 2025Updated 9 months ago
- A script to create and assign SOP tasks into the cases☆20Aug 16, 2020Updated 6 years ago
- Windows forensics Engine☆114Oct 10, 2026Updated last week
- ☆23Mar 4, 2025Updated last year
- Automating Active Directory Tiering☆29Oct 7, 2025Updated last year
- Analyst tool for creating pivot maps of data sources☆16Sep 11, 2017Updated 9 years ago
- DetectPack Forge turns plain-English behaviors or sample logs into production-ready detection packs — Sigma, KQL (Sentinel), SPL (Splunk)…☆24Mar 19, 2026Updated 6 months ago
- .NET tool used to enrich RPC telemetry☆102Jan 24, 2026Updated 8 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Active Directory Penetration Testing Tool☆39Jun 2, 2024Updated 2 years ago
- The ultimate repository for remotely deploying Crowdstrike sensors quickly and discreetly on any other EDR platform.☆26Aug 12, 2025Updated last year
- Cross-platform incident response toolkit. 28 pre-built use cases in a single zero-install binary: triage, threat hunting, memory forensic…☆158Jul 28, 2026Updated 2 months ago
- Interactive PowerShell framework for testing WMI, COM, LOLBAS, and persistence techniques☆131Dec 28, 2025Updated 9 months ago
- This technique leverages PowerShell's .NET interop layer and COM automation to achieve stealthy command execution by abusing implicit typ…☆54May 16, 2025Updated last year
- Mentally ill EtwTi parser☆73Jan 11, 2026Updated 9 months ago
- HoneyWire: The Open-Source, Unlimited Deception Platform. Turn any Linux machine into an enterprise-grade canary in 60 seconds.☆112Aug 28, 2026Updated last month
- Microsoft Sentinel related content☆39Jan 22, 2025Updated last year
- An extensible, deterministic static‑analysis engine that extracts high‑signal IOCs from PE binaries and text, built for SOC automation an…☆28Sep 9, 2026Updated last month
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A powerful, self-extending MCP server for dynamic AI tool orchestration. Features sandboxed JS execution, capability-based security, auto…☆25Jun 12, 2026Updated 4 months ago
- 🛡️Awesome lists about all kinds of interesting topics of Wazuh XDR/SIEM☆144Jul 21, 2026Updated 2 months ago
- ☆20Oct 23, 2020Updated 5 years ago
- Helper utility to selectively apply changes between developer and production FIM2010 servers☆20Oct 11, 2018Updated 8 years ago
- Patched Bash 3.2.24 to log all actions to syslog☆13Dec 16, 2017Updated 8 years ago
- Zeek package to generate a SMB client fingerprint☆27May 5, 2020Updated 6 years ago
- CRADLE is a collaborative platform for Cyber Threat Intelligence analysts. It streamlines threat investigations with integrated note-taki…☆341Oct 8, 2026Updated last week
- A sysmon configuration designed for monitoring RMM solutions from the LOLRMM framework on the OS Microsoft Windows. 10/11☆36Feb 17, 2026Updated 8 months ago
- ☆43May 22, 2021Updated 5 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Windows EVTX log analysis for DFIR — fast parsing, ATT&CK mapping, IOC extraction, and Sentinel anomaly detection. Normal + Juggernaut Mo…☆58Sep 6, 2026Updated last month
- An extendable tool to extract and aggregate IoCs from threat feeds☆33Feb 6, 2024Updated 2 years ago
- ☆34Apr 29, 2026Updated 5 months ago
- Local-first threat hunting for the logs you already have: Zeek, Pi-hole, syslog or the systemd journal, CloudTrail. Every run names the t…☆275Updated this week
- A public repository of quality research on cyber attack techniques. This is the backend for the Technique Research Report (TRR) Library.☆33Sep 1, 2026Updated last month
- Serving payloads only to allowed processes using Windows projected file system feature☆25Feb 7, 2026Updated 8 months ago
- goLoL is a Windows host scanner with dual support for LOLBAS binaries and LOLDrivers. It lists LOLBAS techniques runnable at your current…☆70Jun 28, 2026Updated 3 months ago