Alternatives and similar repositories for chainsaw:

Users that are interested in chainsaw are comparing it to the libraries listed below

• sans-blue-team / DeepBlueCLI
  ☆2,217Updated last year
• Yamato-Security / hayabusa
  Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
  ☆2,408Updated last week
• Velocidex / velociraptor
  Digging Deeper....
  ☆3,058Updated this week
• alexandreborges / malwoverview
  Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Po…
  ☆3,070Updated last month
• last-byte / PersistenceSniper
  Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows…
  ☆1,942Updated last month
• mattnotmax / cyberchef-recipes
  A list of cyber-chef recipes and curated links
  ☆2,049Updated 7 months ago
• sbousseaden / EVTX-ATTACK-SAMPLES
  Windows Events Attack Samples
  ☆2,286Updated last year
• olafhartong / sysmon-modular
  A repository of sysmon configuration modules
  ☆2,700Updated 4 months ago
• ION28 / BLUESPAWN
  An Active Defense and EDR software to empower Blue Teams
  ☆1,249Updated last year
• JPCERTCC / LogonTracer
  Investigate malicious Windows logon by visualizing and analyzing Windows event log
  ☆2,800Updated 6 months ago
• kevoreilly / CAPEv2
  Malware Configuration And Payload Extraction
  ☆2,109Updated this week
• clong / DetectionLab
  Automate the creation of a lab environment complete with security tooling and logging best practices
  ☆4,680Updated 6 months ago
• ahmedkhlief / APT-Hunter
  APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the …
  ☆1,277Updated 2 months ago
• Purp1eW0lf / Blue-Team-Notes
  You didn't think I'd go and leave the blue team out, right?
  ☆1,631Updated last year
• trustedsec / SysmonCommunityGuide
  TrustedSec Sysinternals Sysmon Community Guide
  ☆1,163Updated 7 months ago
• Yamato-Security / WELA
  WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）
  ☆774Updated last year
• davidprowe / BadBlood
  BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of…
  ☆2,075Updated last year
• Neo23x0 / signature-base
  YARA signature and IOC database for my scanners and tools
  ☆2,525Updated last month
• nshalabi / SysmonTools
  Utilities for Sysmon
  ☆1,496Updated 7 months ago
• InQuest / awesome-yara
  A curated list of awesome YARA rules, tools, and people.
  ☆3,646Updated 2 months ago
• S3cur3Th1sSh1t / WinPwn
  Automation for internal Windows Penetrationtest / AD-Security
  ☆3,405Updated last month
• its-a-feature / Mythic
  A collaborative, multi-platform, red teaming framework
  ☆3,373Updated 2 weeks ago
• GhostPack / Rubeus
  Trying to tame the three-headed dog.
  ☆4,243Updated 4 months ago
• rabobank-cdc / DeTTECT
  Detect Tactics, Techniques & Combat Threats
  ☆2,091Updated last week
• netwrix / pingcastle
  PingCastle - Get Active Directory Security at 80% in 20% of the time
  ☆2,404Updated 3 months ago
• splunk / attack_range
  A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data int…
  ☆2,197Updated last week
• NextronSystems / APTSimulator
  A toolset to make a system look as if it was the victim of an APT attack
  ☆2,497Updated last year
• center-for-threat-informed-defense / adversary_emulation_library
  An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
  ☆1,774Updated last year
• MichaelKoczwara / Awesome-CobaltStrike-Defence
  Defences against Cobalt Strike
  ☆1,282Updated 2 years ago
• GhostPack / Seatbelt
  Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensi…
  ☆3,903Updated last week