Open source HIDS tailored for Microsoft Windows and Active Directory
☆31Jul 23, 2026Updated 3 weeks ago
Alternatives and similar repositories for Saeros
Users that are interested in Saeros are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Cyber threat intelligence tool suite.☆41Apr 3, 2025Updated last year
- Storage for the IOCs I collect☆11Apr 3, 2026Updated 4 months ago
- Tool to provision Microsoft identity platform applications and sync it with code configuration☆12Mar 5, 2021Updated 5 years ago
- Security Scripts and Sources for daily usage.☆77May 26, 2026Updated 2 months ago
- NoDelete is a tool that assists in malware analysis by locking a folder where malware drops files before deleting them.☆49Nov 17, 2025Updated 9 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Aftermath is a free macOS incident response framework☆34Sep 25, 2025Updated 10 months ago
- ☆16Dec 25, 2025Updated 7 months ago
- A script to create and assign SOP tasks into the cases☆20Aug 16, 2020Updated 6 years ago
- Windows forensics Engine☆111Aug 8, 2026Updated last week
- A source-available command-line tool for cybersecurity reporting☆71Jul 22, 2026Updated 3 weeks ago
- Automating Active Directory Tiering☆28Oct 7, 2025Updated 10 months ago
- Analyst tool for creating pivot maps of data sources☆16Sep 11, 2017Updated 8 years ago
- DetectPack Forge turns plain-English behaviors or sample logs into production-ready detection packs — Sigma, KQL (Sentinel), SPL (Splunk)…☆24Mar 19, 2026Updated 4 months ago
- .NET tool used to enrich RPC telemetry☆103Jan 24, 2026Updated 6 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Active Directory Penetration Testing Tool☆39Jun 2, 2024Updated 2 years ago
- Cross-platform incident response toolkit. 28 pre-built use cases in a single zero-install binary: triage, threat hunting, memory forensic…☆154Jul 28, 2026Updated 2 weeks ago
- Research indicators and detection rules☆69Sep 20, 2023Updated 2 years ago
- Interactive PowerShell framework for testing WMI, COM, LOLBAS, and persistence techniques☆131Dec 28, 2025Updated 7 months ago
- Mentally ill EtwTi parser☆75Jan 11, 2026Updated 7 months ago
- This technique leverages PowerShell's .NET interop layer and COM automation to achieve stealthy command execution by abusing implicit typ…☆54May 16, 2025Updated last year
- Microsoft Sentinel related content☆38Jan 22, 2025Updated last year
- HoneyWire: The Open-Source, Unlimited Deception Platform. Turn any Linux machine into an enterprise-grade canary in 60 seconds.☆102Jul 19, 2026Updated 3 weeks ago
- A libbgpdump Python CFFI wrapper for analyzing MRTv1 and MRTv2 BGP table dump files.☆15Nov 13, 2019Updated 6 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- An extensible, deterministic static‑analysis engine that extracts high‑signal IOCs from PE binaries and text, built for SOC automation an…☆29Aug 10, 2026Updated last week
- A powerful, self-extending MCP server for dynamic AI tool orchestration. Features sandboxed JS execution, capability-based security, auto…☆25Jun 12, 2026Updated 2 months ago
- 🛡️Awesome lists about all kinds of interesting topics of Wazuh XDR/SIEM☆138Jul 21, 2026Updated 3 weeks ago
- ☆20Oct 23, 2020Updated 5 years ago
- Patched Bash 3.2.24 to log all actions to syslog☆13Dec 16, 2017Updated 8 years ago
- A sysmon configuration designed for monitoring RMM solutions from the LOLRMM framework on the OS Microsoft Windows. 10/11☆33Feb 17, 2026Updated 6 months ago
- Zeek package to generate a SMB client fingerprint☆27May 5, 2020Updated 6 years ago
- CRADLE is a collaborative platform for Cyber Threat Intelligence analysts. It streamlines threat investigations with integrated note-taki…☆344May 18, 2026Updated 2 months ago
- ☆43May 22, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code an…☆58Updated this week
- This is the offical Repository for the Access Package Builder Web App.☆21Apr 17, 2026Updated 4 months ago
- An extendable tool to extract and aggregate IoCs from threat feeds☆33Feb 6, 2024Updated 2 years ago
- Windows EVTX log analysis for DFIR — fast parsing, ATT&CK mapping, IOC extraction, and Sentinel anomaly detection. Normal + Juggernaut Mo…☆56Aug 11, 2026Updated last week
- Brew formula generator for common lisp projects☆21Jul 29, 2024Updated 2 years ago
- Manage your homelab with one tool: WireGuard VPN, split-horizon DNS, HAProxy reverse proxy with automatic wildcard SSL, and service monit…☆39Updated this week
- ☆34Apr 29, 2026Updated 3 months ago