Best Practices, queries, and packages for CQL the language of CrowdStrike's LogScale (Humio) log manager.
☆14May 7, 2026Updated 5 months ago
Alternatives and similar repositories for CQL-Queries
Users that are interested in CQL-Queries are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A collection of CQL hunting leads for CrowdStrike Falcon and LogScale, mapped to the MITRE ATT&CK framework.☆35Sep 8, 2026Updated last month
- Infrastructure as code for CrowdStrike — manage detections, saved searches, lookup files, and more with a Terraform-like lifecycle.☆26Oct 14, 2026Updated last week
- This project automates the creation of a complete security lab environment for detection engineering and attack simulation.☆14Aug 8, 2025Updated last year
- CQL Hub is an open repository of detection and hunting queries for CrowdStrike NextGen SIEM and Falcon LogScale. All queries stored here …☆86Updated this week
- A collection of Claude Code skills that help security teams stay secure☆58Apr 27, 2026Updated 5 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- AI coding assistant skills for building CrowdStrike Falcon Fusion workflows: action discovery, YAML authoring, deployment, execution moni…☆27Updated this week
- Bulk-run Hayabusa across a folder of triage collections, one run per host, with per-host reports and a cross-host triage dashboard☆17Updated this week
- A curated reference of threat detection engineering & incident response frameworks, tools, and detection rule sources.☆13Jun 30, 2026Updated 3 months ago
- The ultimate repository for remotely deploying Crowdstrike sensors quickly and discreetly on any other EDR platform.☆26Aug 12, 2025Updated last year
- Falcon Integration Gateway (FIG)☆26Updated this week
- A lightning-fast, lightweight DFIR triage and threat hunting engine for Windows Minidumps (.DMP).☆20Oct 2, 2026Updated 3 weeks ago
- The Kerberoasting / AD password-audit wordlist I use on engagements: priority-merged HashMob large list + The-Viper-One's kerberoast_pws,…☆16Oct 2, 2026Updated 3 weeks ago
- A public repository of quality research on cyber attack techniques. This is the backend for the Technique Research Report (TRR) Library.☆33Sep 1, 2026Updated last month
- Connect AI agents to CrowdStrike Falcon for automated security analysis and threat hunting☆273Updated this week
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- ☆28Updated this week
- Developer enhancements (DX) for FalconPy, the CrowdStrike Python SDK☆51Jul 1, 2026Updated 3 months ago
- LLM-assisted adversary procedure extraction pipeline for threat-informed defense cycle.☆22Sep 20, 2026Updated last month
- A GUI for packet captures in Windows using pktmon☆12Apr 17, 2023Updated 3 years ago
- 📚 Explore all 344,799 Bible cross-references: every verse on one line with its links as arcs, and every chapter read alongside threads t…☆67Updated this week
- A dockerized version of the sof-elk project☆13Sep 10, 2026Updated last month
- A tool that automates the process of enumeration☆30Oct 27, 2020Updated 5 years ago
- Outil de triage automatisé de différents types de collectes d'artefacts.☆18Dec 8, 2025Updated 10 months ago
- AI coding assistant skills for building CrowdStrike Falcon Foundry apps: scaffolding, deployment, and best practices for API integrations…☆35Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Open source, enterprise-ready AI skills for Splunk use cases, built for secure discovery, consistent execution, and production-grade cust…☆62Sep 11, 2026Updated last month
- Logpresso Mini and community contents for incident response☆22Oct 21, 2021Updated 5 years ago
- This repo contains one liner web shells☆11Feb 10, 2022Updated 4 years ago
- Orchestration Software for Incident Response☆16Oct 9, 2026Updated 2 weeks ago
- Helm charts for CodiMD☆16Jan 3, 2024Updated 2 years ago
- BulkStrike enables the usage of CrowdStrike Real Time Response (RTR) to bulk execute commands on multiple machines.☆44Nov 27, 2022Updated 3 years ago
- Atlassian confluence unauthenticated ONGL injection remote code execution scanner (CVE-2022-26134).☆13Jan 22, 2025Updated last year
- A practical DFIR cheatsheet for identifying, collecting, triaging, and reviewing macOS persistence mechanisms, with acquisition-aware gui…☆26Apr 26, 2026Updated 5 months ago
- DFIR forensics companion server + capture extension☆35Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Threat Analytics Search Chrome Extension☆11Oct 15, 2026Updated last week
- CTI resources for Claude, maintained by Feedly☆36Updated this week
- Evidence-focused malware reverse engineering with deep PE/.NET inspection, Ghidra reconstruction, AI cross-checks, YARA, and ELF debuggin…☆15Oct 10, 2026Updated 2 weeks ago
- Tiny: a tiny programming language implemented in PowerShell☆15Jun 21, 2023Updated 3 years ago
- Code to create, manage, and deploy testing environments using Terraform and Ansible. This includes environments for Kubernetes clusters, …☆11Mar 9, 2024Updated 2 years ago
- Crowdstrike Falcon Host script for iterating through instances to get alert and other relevant data☆14Jul 16, 2019Updated 7 years ago
- Linux Tools for PowerShell People.☆17Sep 24, 2021Updated 5 years ago