A scalable file analysis and data generation platform that allows users to easily orchestrate arbitrary docker/vm/shell tools at scale.
☆1,024Sep 9, 2026Updated this week
Alternatives and similar repositories for thorium
Users that are interested in thorium are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Playbook-NG is a stateless web-based application used to match incident findings with countermeasures for adversary containment and evict…☆164Aug 21, 2026Updated 3 weeks ago
- A simple-to-use IR (incident response) case management tool for tracking and documenting investigations.☆461Apr 29, 2026Updated 4 months ago
- UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It …☆1,452Updated this week
- A curated collection of DFIR skills and workflows for InfoSec practitioners.☆321May 14, 2026Updated 3 months ago
- Automation to assess the state of your M365 tenant against CISA's baselines☆2,660Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A high-speed forensic timeline engine for Windows forensic artifact CSV output built for DFIR investigators. Quickly consolidate CSV outp…☆335Feb 26, 2026Updated 6 months ago
- A Kubernetes Forensic Collection Framework for Azure Kubernetes Service☆44Feb 9, 2026Updated 7 months ago
- An index of publicly available and open-source threat detection rulesets.☆138Apr 17, 2025Updated last year
- Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.☆3,342Updated this week
- Digging Deeper....☆4,243Updated this week
- Generate realistic synthetic security logs for cybersecurity threat hunting training and research☆227Updated this week
- CRADLE is a collaborative platform for Cyber Threat Intelligence analysts. It streamlines threat investigations with integrated note-taki…☆344May 18, 2026Updated 3 months ago
- Rapidly Search and Hunt through Windows Forensic Artefacts☆3,659Aug 25, 2026Updated 2 weeks ago
- Save toil in security operations with: Detection & Intelligence Analysis for New Alerts (D.I.A.N.A. )☆224Sep 4, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Main Sigma Rule Repository☆11,031Updated this week
- Logging Made Easy (LME) is a no cost, open source platform that centralizes log collection, enhances threat detection, and enables real-t…☆1,444May 22, 2026Updated 3 months ago
- Threat-hunting tool for Linux☆1,086Aug 24, 2026Updated 2 weeks ago
- A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the …☆1,900Nov 3, 2024Updated last year
- A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID☆679Jul 6, 2026Updated 2 months ago
- LLM Agent Skill for YARA rule authoring and review☆59Feb 8, 2026Updated 7 months ago
- A PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.☆843Jun 29, 2026Updated 2 months ago
- MCP to help Defenders Detection Engineer Harder and Smarter☆486Jun 16, 2026Updated 2 months ago
- Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive an…☆1,168Aug 28, 2026Updated 2 weeks ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- ☆160Mar 31, 2026Updated 5 months ago
- Repository where I hold random detection and threat hunting queries that I come up with based on different sources of information (or eve…☆290Jun 23, 2026Updated 2 months ago
- A deliberately vulnerable Microsoft Entra ID environment. Learn identity security through hands-on, realistic attack challenges.☆982May 6, 2026Updated 4 months ago
- Rust Library Recognition Project for Rust Malware by the MSTIC-MIRAGE Team☆384Sep 4, 2026Updated last week
- Small and highly portable detection tests based on MITRE's ATT&CK.☆12,524Sep 5, 2026Updated last week
- This project aims to compare and evaluate the telemetry of various EDR products.☆1,985Sep 2, 2026Updated last week
- Segugio allows the execution and tracking of critical steps in the malware detonation process, from clicking on the first stage to extrac…☆151Sep 21, 2024Updated last year
- Python implementation of the CaRT library for (un)inerting files.☆55Feb 10, 2025Updated last year
- A comprehensive ETW (Event Tracing for Windows) event generation tool designed for testing and research purposes.☆284Sep 23, 2025Updated 11 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A collection of files with indicators supporting social media posts from Palo Alto Network's Unit 42 team to disseminate timely threat in…☆600Updated this week
- Malware Configuration And Payload Extraction☆3,489Updated this week
- Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…☆2,508Aug 25, 2026Updated 2 weeks ago
- Your Browser-based EVTX Companion☆124Jul 21, 2026Updated last month
- LotL RMM☆394Updated this week
- AssemblyLine 4: File triage and malware analysis☆536Updated this week
- The MAGIC tool is a wrapper around the Microsoft Graph Python SDK, designed to download incident response-relevant data from M365 environ…☆35Apr 13, 2026Updated 5 months ago