Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents
☆63Sep 10, 2026Updated this week
Alternatives and similar repositories for zettelforge
Users that are interested in zettelforge are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Generation of STIX2 compliant entities for Maltego☆21Oct 4, 2023Updated 2 years ago
- A Linux CLI utility that transparently routes all system traffic through the Tor network using nftables. It enables rapid IP rotation and…☆34Updated this week
- a-ray-grass is a yara module that provides support for DCSO-format bloom filters in yara. In the context of hashlookup, it allows quickly…☆14Aug 19, 2022Updated 4 years ago
- A sysmon configuration designed for monitoring RMM solutions from the LOLRMM framework on the OS Microsoft Windows. 10/11☆34Feb 17, 2026Updated 6 months ago
- Track C2 servers, tools, and botnets over time by framework and location☆16Aug 17, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- DriverSentinel is a security tool developed in Go that detects malicious and vulnerable drivers on Windows systems by comparing them agai…☆36Jul 28, 2026Updated last month
- MCP server with 55 security intelligence tools — CVE/KEV, MITRE ATLAS+D3FEND, Sigma detection rules, email security posture (SPF/DMARC), …☆33Updated this week
- SecTor - Not-So-Secret Agents: Deploying AI to Optimize Security Operations☆46Oct 15, 2025Updated 10 months ago
- FireEye iSIGHT Alert Feeder for TheHive, an Open Source and Free Security Incident Response Platform☆16Oct 12, 2018Updated 7 years ago
- Capture. Detonate. Collect☆14Sep 20, 2024Updated last year
- petit "playbook" qui pourrait servir de base à une réponse à incident lors d'une attaque de type ransomware☆21Aug 30, 2022Updated 4 years ago
- Noradrenaline is a collection of high-performance post-exploitation shared libraries designed for native execution on macOS and Linux end…☆31Sep 1, 2026Updated 2 weeks ago
- Storage for the IOCs I collect☆11Apr 3, 2026Updated 5 months ago
- Minimal Indicator Storage System☆12Feb 8, 2021Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ThreatShield is an AI-powered malware analysis platform that combines static and dynamic analysis and machine learning to detect and expl…☆16Mar 23, 2026Updated 5 months ago
- A curated collection of DFIR skills and workflows for InfoSec practitioners.☆321May 14, 2026Updated 4 months ago
- A VS Code plugin to execute arbitrary JavaScript code at runtime over a local HTTP endpoint.☆34Feb 10, 2026Updated 7 months ago
- Open source HIDS tailored for Microsoft Windows and Active Directory☆31Jul 23, 2026Updated last month
- Adversary Simulation Framework☆41Aug 19, 2025Updated last year
- Run TTPs, with AI!☆142Feb 23, 2026Updated 6 months ago
- Analyze secretsdump output and hashcat potfiles to find shared passwords and weak credentials in Active Directory☆36Apr 4, 2026Updated 5 months ago
- PPLReaper is a Windows UNSIGNED kernel driver + userland companion tool designed to inspect and manipulate Protected Process Light (PPL) …☆25Mar 4, 2026Updated 6 months ago
- Kitsune 🦊 A LangGraph workflow for crafting detections against emerging tradecraft.☆14Apr 20, 2026Updated 4 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A Caido plugin to monitor, intercept, and debug JavaScript sinks based on customizable configurations.☆50Apr 8, 2026Updated 5 months ago
- Threat Hunting queries of multiple platforms☆84Updated this week
- FrontHunter is a tool for testing large lists of domains to identify candidates for domain fronting.☆22May 5, 2025Updated last year
- ☆16Jan 18, 2020Updated 6 years ago
- Open-source unified security operations & threat intelligence platform for OT/ICS environments with ontology-driven dashboards☆50May 27, 2026Updated 3 months ago
- Extensible MacOS system telemetry generator.☆67Updated this week
- AI-Powered Threat Intelligence MCP tool☆39Jul 18, 2025Updated last year
- Advanced Threat Hunting: Ransomware Group☆29Jul 9, 2025Updated last year
- Analyst tool for creating pivot maps of data sources☆16Sep 11, 2017Updated 9 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Lists of independent cybersecurity blogs covering threat intelligence, purple team, red team, threat hunting, and detection engineering. …☆43Aug 26, 2026Updated 2 weeks ago
- ☆26Jul 23, 2024Updated 2 years ago
- GenAI-STIX2.1-Generator is a tool that leverages Azure OpenAI capabilities to transform threat intelligence reports from unstructured web…☆24Mar 24, 2025Updated last year
- ltm is a machine-history debugger for Linux. It records process, file, network, memory, and block-I/O metadata via eBPF, then lets you qu…☆25Jul 16, 2026Updated last month
- ☆19Jul 21, 2022Updated 4 years ago
- Aether is a Windows memory-forensics and threat hunting tool that scans live process memory for malicious pattern, detect injection techn…☆60Jul 5, 2026Updated 2 months ago
- DFIR Timeline Analysis for macOS — SQLite-backed viewer for CSV, TSV, XLSX, EVTX, Plaso, $MFT, and $J files with AI Artifacts, AI Secret …☆366Sep 8, 2026Updated last week