Alternatives and similar repositories for ThreatHunter-Playbook

Users that are interested in ThreatHunter-Playbook are comparing it to the libraries listed below

• vector-sec / DuoPusher

  View on GitHub
  Duo MFA auditing tool to test users' likelihood of approving unexpected push notifications
  ☆13Apr 20, 2018Updated 7 years ago
• jheise / threatcmd

  View on GitHub
  Cli interface to threatcrowd.org
  ☆20Jul 6, 2017Updated 8 years ago
• jp-slackspace / x-tension-c-sharp

  View on GitHub
  An updated C# port of X-Ways X-Tensions API.
  ☆11Mar 12, 2018Updated 7 years ago
• bsi-group / autorun-logger-server

  View on GitHub
  Server for receiving autorun data from the clients
  ☆13Sep 26, 2017Updated 8 years ago
• unkn0wnvariable / PowerShell-VMwareAdmin

  View on GitHub
  My attempts at making life with VMware that little bit easier.
  ☆11Aug 7, 2023Updated 2 years ago
• j-0-t / murmamau

  View on GitHub
  Fetching data from system
  ☆12Jun 18, 2017Updated 8 years ago
• BitsOfBinary / yarabuilder

  View on GitHub
  Python 3 library to build YARA rules.
  ☆13Oct 24, 2021Updated 4 years ago
• corelight / got_zoom

  View on GitHub
  A Zeek package that detects Zoom logins and meeting joins
  ☆12Apr 15, 2020Updated 5 years ago
• forensicmatt / RustyReg

  View on GitHub
  Registry to JSON. This Project is for learning purposes and is not maintained.
  ☆12Dec 28, 2021Updated 4 years ago
• 0xAnalyst / Sysmon

  View on GitHub
  Sysmon config for both Windows and Linux Devices. Windows one is a bit dated
  ☆55Jul 10, 2024Updated last year
• obsidianforensics / scripts

  View on GitHub
  Small scripts and POCs related to digital forensics
  ☆18Nov 1, 2022Updated 3 years ago
• kf0jvt / osq_simulator

  View on GitHub
  ☆15Nov 11, 2015Updated 10 years ago
• silascutler / DetuxNG

  View on GitHub
  The Multiplatform Linux Sandbox
  ☆16Dec 19, 2023Updated 2 years ago
• strozfriedberg / liblightgrep

  View on GitHub
  Fast multipattern regular expression searching for digital forensics
  ☆18Jul 31, 2019Updated 6 years ago
• hoenirvili / skapt

  View on GitHub
  Package for building command line apps in Go
  ☆17Oct 26, 2018Updated 7 years ago
• jschicht / MftCarver

  View on GitHub
  Carve $MFT records from a chunk of data (for instance a memory dump)
  ☆16Aug 21, 2016Updated 9 years ago
• msuhanov / registry-miner

  View on GitHub
  Registry Miner
  ☆14Apr 10, 2018Updated 7 years ago
• EricZimmerman / USBDevices

  View on GitHub
  Get USB Devices from Registry hives
  ☆22Nov 15, 2021Updated 4 years ago
• yolothreat / utilitybelt

  View on GitHub
  A Python library for being a CND Batman....
  ☆35Oct 29, 2015Updated 10 years ago
• Truneski / WindowsKernelProgramming-Exercises

  View on GitHub
  ☆51Apr 13, 2020Updated 5 years ago
• JeremyBlackthorne / PE-Runtime-Data-Structures

  View on GitHub
  ☆18Apr 4, 2019Updated 6 years ago
• jipegit / IRNotes

  View on GitHub
  Some IR notes
  ☆73Jul 23, 2016Updated 9 years ago
• daguy666 / Transit

  View on GitHub
  MacOS incident Response Toolkit. Mostly written while stuck on a NJTransit train.
  ☆20Feb 20, 2020Updated 5 years ago
• Cainor / Calendarinho

  View on GitHub
  Manage Your Large Team of Consultants
  ☆11Sep 18, 2025Updated 4 months ago
• kolide / kolide-quickstart

  View on GitHub
  [DEPRECATED] A quickstart demo for Kolide tools
  ☆52May 29, 2018Updated 7 years ago
• mozilla / ssm-acquire

  View on GitHub
  A python module for orchestrating content acquisitions and analysis via amazon ssm.
  ☆58Nov 2, 2023Updated 2 years ago
• JamesHabben / sysmon-queries

  View on GitHub
  Queries to parse sysmon event log file with microsoft logparser
  ☆58Mar 31, 2015Updated 10 years ago
• libyal / winevt-kb

  View on GitHub
  Windows Event Log Knowledge Base
  ☆29Dec 23, 2025Updated last month
• forensiclunch / ETLParser

  View on GitHub
  Binary commandline executable to parse ETL files
  ☆69Jun 7, 2018Updated 7 years ago
• DissectMalware / ClipboardWatcher

  View on GitHub
  Monitor the textual data pasted into Windows clipboard
  ☆29Nov 4, 2018Updated 7 years ago
• herrcore / punbup

  View on GitHub
  Python unbup script for McAfee .bup files (with some additional fun features). This script is fully implemented in python it's not just a…
  ☆37Apr 24, 2018Updated 7 years ago
• devgc / ElasticHandler

  View on GitHub
  Assorted classes and methods for indexing reports and retrieving information from an elastic index
  ☆21Jul 5, 2016Updated 9 years ago
• maximeolivier / pyCAF

  View on GitHub
  Configuration security audit framework
  ☆21Apr 27, 2016Updated 9 years ago
• TakahiroHaruyama / onigiri

  View on GitHub
  onigiri - remote malware triage script
  ☆24Nov 5, 2015Updated 10 years ago
• Silv3rHorn / ArtifactExtractor

  View on GitHub
  Extract common Windows artifacts from source images and VSCs
  ☆64May 10, 2021Updated 4 years ago
• sfakiana / FIRST-CTI-2019

  View on GitHub
  References for FIRST CTI 2019 Symposium presentation
  ☆23Mar 19, 2019Updated 6 years ago
• msuhanov / regf-samples

  View on GitHub
  Windows registry samples
  ☆24Nov 18, 2018Updated 7 years ago
• Th3J0kr / jtb_investigator

  View on GitHub
  A tool to speed up the process of doing the same simple IP/Domain Name lookups over and over again.
  ☆66Dec 12, 2018Updated 7 years ago
• harvard-itsecurity / docker-misp

  View on GitHub
  Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing
  ☆177Mar 23, 2021Updated 4 years ago