Mindmaps for threat hunting - work in progress.
☆149Mar 15, 2022Updated 4 years ago
Alternatives and similar repositories for mindmaps
Users that are interested in mindmaps are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Misc Threat Hunting Resources☆376Jan 26, 2023Updated 3 years ago
- Detection Ideas & Rules repository.☆179Sep 10, 2021Updated 5 years ago
- Quick & Dirty DFIR scripts developed by Ebryx DFIR team to keep handy during field assignment☆14Jan 7, 2026Updated 9 months ago
- An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.☆348Dec 3, 2025Updated 10 months ago
- A repository of DFIR-related Mind Maps geared towards the visual learners!☆554Sep 2, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Searches For Threat Hunting and Security Analytics☆238Mar 26, 2025Updated last year
- A Microsoft Windows service to provide telemetry on Windows executable memory page changes to facilitate threat detection☆33Oct 7, 2020Updated 6 years ago
- All-in-one bundle of MISP, TheHive and Cortex☆168Sep 27, 2022Updated 4 years ago
- ☆20Feb 22, 2021Updated 5 years ago
- Detect Tactics, Techniques & Combat Threats☆2,354Oct 19, 2026Updated 2 weeks ago
- Tool Analysis Result Sheet☆358Dec 4, 2017Updated 8 years ago
- DetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.☆578Dec 12, 2021Updated 4 years ago
- Dynamic PowerShell Analysis Framework Based Upon PowerShell Debugging Functionality☆83Feb 18, 2023Updated 3 years ago
- A CLI tool for querying passive DNS services☆45Dec 15, 2023Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A list of cyber-chef recipes and curated links☆2,226Jun 14, 2024Updated 2 years ago
- Visual Att&ck Tool☆12Oct 18, 2021Updated 5 years ago
- #ThreatHunting #DFIR #Malware #Detection Mind Maps☆305Nov 13, 2021Updated 4 years ago
- IDA PRO FLIRT signature files MSVC2017的sig文件☆14Apr 9, 2019Updated 7 years ago
- Unpacking and decryption tools for the Emotet malware☆44Dec 5, 2021Updated 4 years ago
- dankAlerts is powered by Sysmon and Memes. Would you notice if a suspicious process was recorded in the event log?☆18Jun 24, 2020Updated 6 years ago
- Collection of created MindMaps☆149Nov 14, 2023Updated 2 years ago
- Retired beginner/intermediate malware analysis training materials from @pedramamini and @erocarrera.☆908Feb 25, 2020Updated 6 years ago
- Windows Events Attack Samples☆2,644Jan 24, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Automated Tactics Techniques & Procedures☆262May 26, 2023Updated 3 years ago
- Allows you to quickly query a Windows machine for RAM artifacts☆219Jul 17, 2020Updated 6 years ago
- Projects for AWS ThreatHunting☆21Aug 20, 2021Updated 5 years ago
- Virtual Machine for Adversary Emulation and Threat Hunting☆1,319Jan 22, 2025Updated last year
- All sysmon event types and their fields explained☆576Nov 13, 2021Updated 4 years ago
- An Active Defense and EDR software to empower Blue Teams☆1,350Mar 31, 2026Updated 7 months ago
- Sysmon EDR POC Build within Powershell to prove ability.☆229May 1, 2021Updated 5 years ago
- Automatically create YARA rules from malicious documents.☆210May 16, 2022Updated 4 years ago
- Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK☆1,080Nov 28, 2024Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Windows 10 Live Information viewer☆40Jan 27, 2022Updated 4 years ago
- Random hunting ordiented yara rules☆98Mar 27, 2023Updated 3 years ago
- Investigate malicious Windows logon by visualizing and analyzing Windows event log☆3,299Aug 2, 2026Updated 3 months ago
- Chain Reactor is an open source framework for composing executables that simulate adversary behaviors and techniques on Linux endpoints.☆351Apr 8, 2025Updated last year
- ☆68May 13, 2022Updated 4 years ago
- An informational repo about hunting for adversaries in your IT environment.☆1,899Nov 17, 2021Updated 4 years ago
- A curated list of awesome malware analysis tools and resources☆47Jul 17, 2020Updated 6 years ago