Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents
☆66Oct 22, 2026Updated last week
Alternatives and similar repositories for zettelforge
Users that are interested in zettelforge are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Generation of STIX2 compliant entities for Maltego☆21Oct 4, 2023Updated 3 years ago
- TypeQL language library for Python☆17Jan 26, 2022Updated 4 years ago
- SecTor - Not-So-Secret Agents: Deploying AI to Optimize Security Operations☆51Oct 15, 2025Updated last year
- ⚡ Rust-accelerated temporal graph engine for cybersecurity threat hunting. Ingests 100M+ edges from PCAP/CSV on a single machine. Sub-sec…☆15Jul 30, 2026Updated 2 months ago
- Adversarial Detection Engineering knowledge base — ADE taxonomy, worked technique files, platform bug patterns, mitigations, and purple-t…☆84Sep 30, 2026Updated 3 weeks ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- a-ray-grass is a yara module that provides support for DCSO-format bloom filters in yara. In the context of hashlookup, it allows quickly…☆14Aug 19, 2022Updated 4 years ago
- A Linux CLI utility that transparently routes all system traffic through the Tor network using nftables. It enables rapid IP rotation and…☆47Oct 22, 2026Updated last week
- FireEye iSIGHT Alert Feeder for TheHive, an Open Source and Free Security Incident Response Platform☆16Oct 12, 2018Updated 8 years ago
- Track C2 servers, tools, and botnets over time by framework and location☆16Aug 17, 2025Updated last year
- A VS Code plugin to execute arbitrary JavaScript code at runtime over a local HTTP endpoint.☆34Feb 10, 2026Updated 8 months ago
- Capture. Detonate. Collect☆14Sep 20, 2024Updated 2 years ago
- petit "playbook" qui pourrait servir de base à une réponse à incident lors d'une attaque de type ransomware☆21Aug 30, 2022Updated 4 years ago
- Threat Hunting queries of multiple platforms☆86Oct 22, 2026Updated last week
- GHARF is an efficient support framework for Red Team exercises that applies the concept of CI/CD☆41Jul 14, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Storage for the IOCs I collect☆11Apr 3, 2026Updated 6 months ago
- A sysmon configuration designed for monitoring RMM solutions from the LOLRMM framework on the OS Microsoft Windows. 10/11☆37Feb 17, 2026Updated 8 months ago
- Run TTPs, with AI!☆143Feb 23, 2026Updated 8 months ago
- A curated collection of DFIR skills and workflows for InfoSec practitioners.☆325May 14, 2026Updated 5 months ago
- Read-only OBD-II diagnostic assistant: an MCP server so Claude can read your car's trouble codes and live data, plus a local live dashboa…☆24Oct 10, 2026Updated 2 weeks ago
- ☆13Jan 26, 2026Updated 9 months ago
- Helping defenders learn and validate npm supply-chain detections with safe atomic tests.☆35Oct 30, 2025Updated 11 months ago
- ☆16Dec 16, 2020Updated 5 years ago
- Minimal Indicator Storage System☆12Feb 8, 2021Updated 5 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ThreatShield is an AI-powered malware analysis platform that combines static and dynamic analysis and machine learning to detect and expl…☆16Mar 23, 2026Updated 7 months ago
- DriverSentinel is a security tool developed in Go that detects malicious and vulnerable drivers on Windows systems by comparing them agai…☆36Jul 28, 2026Updated 3 months ago
- ☆31Oct 21, 2026Updated last week
- A threat hunting process☆146Oct 2, 2026Updated 3 weeks ago
- MCP server with 55 security intelligence tools — CVE/KEV, MITRE ATLAS+D3FEND, Sigma detection rules, email security posture (SPF/DMARC), …☆35Oct 21, 2026Updated last week
- motd-skin - A customizable SSH login splash screen for Linux servers. Displays hostname, network, DNS, and VMware/Proxmox virtualization…☆17Nov 22, 2025Updated 11 months ago
- Open source HIDS tailored for Microsoft Windows and Active Directory☆31Jul 23, 2026Updated 3 months ago
- Prevention-focused living-off-the-land testing framework mapped to MITRE ATT&CK.☆30Jul 24, 2026Updated 3 months ago
- A Public Package Scanner for The Community☆13Jan 14, 2026Updated 9 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- AI-powered tool designed to help producing Threat Intelligence Mindmap.☆112Feb 16, 2026Updated 8 months ago
- Kitsune 🦊 A LangGraph workflow for crafting detections against emerging tradecraft.☆16Apr 20, 2026Updated 6 months ago
- Runtime security for AI agents. In-process, zero dependencies, Apache 2.0.☆29Updated this week
- A retro browser game that teaches Vim motions through drills, exploration, and creature battles.☆22Apr 26, 2026Updated 6 months ago
- ☆16Jan 18, 2020Updated 6 years ago
- Dockerized nginx app used to create high-level timeline visuals for red team assessments☆36Feb 25, 2026Updated 8 months ago
- Open Source Threat Intelligence Platform☆170Jan 8, 2026Updated 9 months ago