A repository of curated lists with elements such as IoCs to use for threat hunting & detection queries.
☆35Jul 23, 2024Updated 2 years ago
Alternatives and similar repositories for Hunting-Lists
Users that are interested in Hunting-Lists are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆16Updated this week
- A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 D…☆801Updated this week
- Domain Response is a tool that is designed to help you automate the investigation for a domain. This tool is specificly designed to autom…☆53Jan 1, 2026Updated 10 months ago
- Client-side Encrypted Upload Server Python Script☆68Jul 10, 2025Updated last year
- Repository with Sample threat hunting notebooks on Security Event Log Data Sources☆70Dec 2, 2022Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Research into Undocumented Behavior of Azure AD Refresh Tokens☆12Oct 27, 2023Updated 3 years ago
- Cobalt Strike random C2 Profile generator☆18Sep 15, 2026Updated last month
- A deliberately insecure web app to practice exploiting real-world vulnerabilities like SQL Injection, XSS, CSRF, IDOR, and more. Ideal fo…☆13Jun 12, 2025Updated last year
- A spreadsheet designed to automatically generate Key Performance Indicators (charts) for Cyber Security Services based on documented data…☆31Jul 19, 2024Updated 2 years ago
- A command-line tool for reconnaissance and targeted write operations on Confluence and Jira instances.☆14Jan 15, 2025Updated last year
- Sigma detection rules for hunting with the threathunting-keywords project☆61Mar 2, 2025Updated last year
- Scripts useful in cracking the Vulnhub Lab named View2aKill: 1☆28Feb 1, 2020Updated 6 years ago
- Living off the False Positive!☆43Apr 3, 2026Updated 7 months ago
- GitHub repository for the Microsoft Defender for Identity in Depth book☆11Dec 5, 2024Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A curated list of resources for DFIR through Microsoft Defender for Endpoint leveraging kusto queries, powershell scripts, tools such as …☆475Feb 18, 2026Updated 8 months ago
- ☆28Jan 8, 2025Updated last year
- Powershell collection designed to assist in Threat Hunting Windows systems.☆27Apr 13, 2018Updated 8 years ago
- ☆30Jan 13, 2026Updated 9 months ago
- Windows host hardening auditor and remediation tool in PowerShell: CIS, DISA STIG, Essential Eight checks, reversible fixes, optional AI …☆21Oct 30, 2026Updated last week
- Hints for the Kusto Detective Agency - Season 2☆10Aug 15, 2023Updated 3 years ago
- really ?☆12Feb 29, 2024Updated 2 years ago
- Copy metadata and digital signatures information from one Windows executable to another using Wine on a non-Windows platform☆18Apr 17, 2024Updated 2 years ago
- Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on☆82Apr 27, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- SNMP Bash Script to discover valid community strings, dump basic information, check for write permission and check for RCE.☆11Apr 27, 2024Updated 2 years ago
- Assist analyst and threat hunters to understand Windows authentication logs and to analyze brutforce scenarios.☆21Jul 1, 2023Updated 3 years ago
- Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)☆18Jul 19, 2024Updated 2 years ago
- Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise☆69Jul 2, 2026Updated 4 months ago
- Sniffing files generator☆62Feb 24, 2025Updated last year
- A Windows tool that converts LDIF files to BloodHound CE☆34Dec 20, 2025Updated 10 months ago
- 🐻❄️ 🏹 Threat hunting with Polars and flaws.cloud AWS CloudTrail datasets.☆15May 22, 2024Updated 2 years ago
- Azure DevOps Services Attack Toolkit☆156Jul 27, 2026Updated 3 months ago
- An external reconnaissnce MCP server for offensive security engagements☆14Apr 11, 2025Updated last year
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- 👀 List of ad/tracking servers.☆13Oct 2, 2023Updated 3 years ago
- Program written in C that detects hooks placed on functions by an EDR☆19Nov 20, 2025Updated 11 months ago
- A BOF to regularly check for active users on a target.☆16Apr 19, 2025Updated last year
- Azure OpenAI Playbook created for Microsoft Sentinel☆14May 2, 2024Updated 2 years ago
- VTC - Velociraptor Timeline Creator☆20May 15, 2024Updated 2 years ago
- This repository contains Splunk queries to hunt some anomalies☆48Jul 28, 2022Updated 4 years ago
- Cheat sheets for threat hunting, detection and other stuff.☆35Oct 7, 2022Updated 4 years ago