A curated arsenal of 55 blue team / detection engineering tools across 13 sections, mapped to real SOC workflows. Where a tool appears in your own lab work, the entry links to your writeup.
☆15Jul 17, 2026Updated 3 months ago
Alternatives and similar repositories for soc-analyst-toolkit
Users that are interested in soc-analyst-toolkit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- MalwareScan is a lightweight and fast malware scanner written in Python. It supports both Windows and Linux platforms and provides an ope…☆14Jun 2, 2025Updated last year
- ☆15Nov 4, 2024Updated last year
- ☆11Jul 8, 2024Updated 2 years ago
- FULL reverse engineering of a 64-bit keylogger☆15Sep 5, 2025Updated last year
- The self-hosted KQL query management platform for SOC teams☆22May 20, 2026Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- This lab seeks to put the pieces of information learned in my CCNP journey together and come up with a working topology☆15Jan 12, 2026Updated 9 months ago
- ☆24Feb 13, 2026Updated 8 months ago
- Common framework for designing a detection and response framework for the most common MFT solutions☆16Aug 4, 2023Updated 3 years ago
- Security-first development skills for Claude Code, powered by the F.O.R.G.E. framework. Built by operators, not consultants.☆11Oct 12, 2026Updated 2 weeks ago
- A complete home lab for Windows forensics and incident response using PowerShell, covering user accounts, processes, services, scheduled …☆13Jul 24, 2024Updated 2 years ago
- multi layer encryption for payloads with options of delivery welcome to the Tenebris side☆27May 9, 2026Updated 5 months ago
- Golang wrapper for Volatility3☆22Oct 2, 2026Updated 3 weeks ago
- This tool clusters malware samples and extracts core shared artefacts by combining static analysis, optional dynamic analysis, and progre…☆25Apr 11, 2026Updated 6 months ago
- Shattering the 1:10 barrier. A high-velocity alternative to Plaso for the modern IR landscape☆18Jul 6, 2026Updated 3 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A running list of Windows sources and the related event ids.☆19Aug 2, 2023Updated 3 years ago
- ☆77Sep 14, 2026Updated last month
- Hwaro (화로) is a lightweight and fast Static Site Generator(SSG) written in Crystal.☆42Oct 18, 2026Updated last week
- Onesist platform to enhance productivity for System Analyst deliverable Technical Requirement☆30Updated this week
- network4dev.net website☆10Sep 30, 2020Updated 6 years ago
- Pure standalone, zero-browser Meta Threads intelligence engine & CLI. Cloud API & SaaS at https://skelepel.id☆30Sep 26, 2026Updated last month
- A list of useful CyberChef recipes☆18Jun 20, 2025Updated last year
- ☆15Nov 22, 2025Updated 11 months ago
- Azure Monitor Lab Exercises☆23Feb 24, 2026Updated 8 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆28May 1, 2023Updated 3 years ago
- Hands-on projects for beginners to learn and practice Linux forensics and essential cybersecurity skills☆19Jun 29, 2024Updated 2 years ago
- End-to-end Azure edge security lab: Front Door Premium with WAF, dual-region Container Apps failover, Microsoft Sentinel, SOC automation,…☆23Sep 18, 2026Updated last month
- Herramienta enfocada a Blindar/Proteger nuestro equipo para que todo rastro que deje en Internet o en Redes Locales sea Falso e Inrasteab…☆32Sep 1, 2023Updated 3 years ago
- A real-time, terminal-based network traffic analyzer built with Python, Scapy, and Rich. Captures live packets using multi-threading to d…☆54Aug 7, 2026Updated 2 months ago
- Crack base64(sha256(username)) hash from Microsoft Event ID 1029☆24Aug 4, 2023Updated 3 years ago
- A small guide on Unknown/Orphaned SIDs and some PowerShell tools to help you get rid of them.☆21Apr 16, 2026Updated 6 months ago
- An exercise to practice deobfuscating PowerShell Scripts.☆26Feb 10, 2023Updated 3 years ago
- ☆22Jun 21, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆59Aug 25, 2026Updated 2 months ago
- Bulk-provision Google accounts into 9router for Antigravity AI model access (ag/claude-*, ag/gemini-*)☆45Sep 25, 2026Updated last month
- Rust DFIR tool that massively parses cross-platform evidence, even deleted logs, into a lateral movement timeline and graph database.☆27Oct 14, 2026Updated 2 weeks ago
- OSINT datatabase (France / Internationale)☆51Jul 8, 2026Updated 3 months ago
- 🚀 Automated scraper & injector for 100+ free AI coding models into 9router combos. Live pre-tested, ranked by coding benchmarks & zero-…☆55Oct 21, 2026Updated last week
- Collection of Splunking Tools, SPL Code and Resources☆17Oct 2, 2026Updated 3 weeks ago
- The results of my small term paper on the topic of the Internet of Vulnerable Things and the exploit for CVE-2022-48194.☆19Jan 20, 2023Updated 3 years ago