APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
☆1,432Sep 20, 2026Updated last month
Alternatives and similar repositories for APT-Hunter
Users that are interested in APT-Hunter are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Windows Events Attack Samples☆2,642Jan 24, 2023Updated 3 years ago
- Rapidly Search and Hunt through Windows Forensic Artefacts☆3,708Updated this week
- A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs☆874Updated this week
- Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.☆3,441Updated this week
- Investigate malicious Windows logon by visualizing and analyzing Windows event log☆3,302Aug 2, 2026Updated 3 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Collection of Event ID ressources useful for Digital Forensics and Incident Response☆665Jun 19, 2024Updated 2 years ago
- A toolset to make a system look as if it was the victim of an APT attack☆2,788Sep 23, 2025Updated last year
- WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）☆774Feb 3, 2023Updated 3 years ago
- ☆2,443Oct 14, 2023Updated 3 years ago
- Scan files or process memory for CobaltStrike beacons and parse their configuration☆917Aug 19, 2021Updated 5 years ago
- ☆1,132Dec 19, 2023Updated 2 years ago
- Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows…☆2,152Dec 11, 2024Updated last year
- Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).☆831Oct 21, 2026Updated 2 weeks ago
- Interesting APT Report Collection And Some Special IOCs☆3,122Oct 30, 2026Updated last week
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Utilities for Sysmon☆1,670Apr 4, 2026Updated 7 months ago
- Defences against Cobalt Strike☆1,303Jul 14, 2022Updated 4 years ago
- Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders☆1,086Oct 5, 2023Updated 3 years ago
- A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more e…☆4,709Jan 12, 2026Updated 9 months ago
- Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, M…☆4,139Sep 22, 2026Updated last month
- Set of EVTX samples (>270) mapped to MITRE ATT&CK tactic and techniques to measure your SIEM coverage or developed new use cases.☆646May 21, 2026Updated 5 months ago
- Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detection…☆874Jan 20, 2022Updated 4 years ago
- Open Source EDR for Windows☆1,321Feb 25, 2023Updated 3 years ago
- Documentation and scripts to properly enable Windows event logs.☆725Oct 3, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Main Sigma Rule Repository☆11,421Updated this week
- Loki - Simple IOC and YARA Scanner☆3,801Jan 12, 2026Updated 9 months ago
- A repository of sysmon configuration modules☆3,186Oct 14, 2026Updated 3 weeks ago
- Digging Deeper....☆4,423Updated this week
- Threat Hunting tool about Sysmon and graphs☆341May 28, 2023Updated 3 years ago
- DFIRTrack - The Incident Response Tracking Application☆540Jan 13, 2026Updated 9 months ago
- Hunts out CobaltStrike beacons and logs operator command output☆960Sep 4, 2024Updated 2 years ago
- A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365☆796Oct 29, 2022Updated 4 years ago
- Detect Tactics, Techniques & Combat Threats☆2,357Updated this week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Small and highly portable detection tests based on MITRE's ATT&CK.☆12,781Updated this week
- A curated list of tools for incident response☆9,539Oct 13, 2026Updated 3 weeks ago
- Elastic Security detection content for Endpoint☆1,510Updated this week
- Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks,…☆2,431Jun 6, 2026Updated 5 months ago
- YARA signature and IOC database for my scanners and tools☆3,060Oct 29, 2026Updated last week
- Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK☆1,078Nov 28, 2024Updated last year
- ✨ A curated list of awesome threat detection and hunting resources 🕵️♂️☆4,786Jan 5, 2026Updated 10 months ago