A scalable file analysis and data generation platform that allows users to easily orchestrate arbitrary docker/vm/shell tools at scale.
☆1,028Oct 23, 2026Updated last week
Alternatives and similar repositories for thorium
Users that are interested in thorium are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Playbook-NG is a stateless web-based application used to match incident findings with countermeasures for adversary containment and evict…☆166Aug 21, 2026Updated 2 months ago
- A simple-to-use IR (incident response) case management tool for tracking and documenting investigations.☆469Apr 29, 2026Updated 6 months ago
- UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It …☆1,504Updated this week
- Logging Made Easy (LME) is a no cost, open source platform that centralizes log collection, enhances threat detection, and enables real-t…☆1,443May 22, 2026Updated 5 months ago
- Digging Deeper....☆4,386Updated this week
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.☆3,423Updated this week
- Automation to assess the state of your M365 tenant against CISA's baselines☆2,767Updated this week
- A curated collection of DFIR skills and workflows for InfoSec practitioners.☆325May 14, 2026Updated 5 months ago
- Rapidly Search and Hunt through Windows Forensic Artefacts☆3,701Oct 14, 2026Updated 2 weeks ago
- Main Sigma Rule Repository☆11,366Oct 21, 2026Updated last week
- Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders☆1,085Oct 5, 2023Updated 3 years ago
- Save toil in security operations with: Detection & Intelligence Analysis for New Alerts (D.I.A.N.A. )☆224Sep 4, 2024Updated 2 years ago
- A Kubernetes Forensic Collection Framework for Azure Kubernetes Service☆44Feb 9, 2026Updated 8 months ago
- Threat-hunting tool for Linux☆1,097Updated this week
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- An index of publicly available and open-source threat detection rulesets.☆141Apr 17, 2025Updated last year
- Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…☆2,571Updated this week
- Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, M…☆4,135Sep 22, 2026Updated last month
- Generate realistic synthetic security logs for cybersecurity threat hunting training and research☆293Updated this week
- Malware Configuration And Payload Extraction☆3,631Updated this week
- CRADLE is a collaborative platform for Cyber Threat Intelligence analysts. It streamlines threat investigations with integrated note-taki…☆342Oct 20, 2026Updated last week
- A resource containing all the tools each ransomware gangs uses☆1,459Aug 29, 2026Updated 2 months ago
- A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the …☆1,912Nov 3, 2024Updated last year
- ☆168Mar 31, 2026Updated 6 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.☆863Jun 29, 2026Updated 4 months ago
- This project aims to compare and evaluate the telemetry of various EDR products.☆1,998Updated this week
- Open-source security automation platform for teams and AI agents☆3,872Updated this week
- MISP (core software) - Open Source Threat Intelligence and Sharing Platform☆6,623Updated this week
- Collaborative Incident Response platform☆1,615Oct 22, 2026Updated last week
- A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID☆681Oct 18, 2026Updated last week
- A deliberately vulnerable Microsoft Entra ID environment. Learn identity security through hands-on, realistic attack challenges.☆1,023May 6, 2026Updated 5 months ago
- Rust Library Recognition Project for Rust Malware by the MSTIC-MIRAGE Team☆390Oct 17, 2026Updated last week
- Python implementation of the CaRT library for (un)inerting files.☆58Feb 10, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- IntelOwl: manage your Threat Intelligence at scale☆4,770Updated this week
- LLM Agent Skill for YARA rule authoring and review☆60Feb 8, 2026Updated 8 months ago
- Operational Relay Box Intelligence, Tracking, & Analysis Lexicon (ORBITAL)☆38Aug 30, 2026Updated last month
- Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive an…☆1,178Oct 13, 2026Updated 2 weeks ago
- Collection of Cyber Threat Intelligence sources from the deep and dark web☆7,434Updated this week
- Powershell module for VMWare vSphere forensics☆189Nov 8, 2024Updated last year
- Small and highly portable detection tests based on MITRE's ATT&CK.☆12,741Updated this week