Build AI-powered security tools. 50+ hands-on labs covering ML, LLMs, RAG, threat detection, DFIR, and red teaming. Includes Colab notebooks, Docker environment, and CTF challenges.
☆161Sep 17, 2026Updated this week
Alternatives and similar repositories for ai_for_the_win
Users that are interested in ai_for_the_win are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Automated n8n workflow for ransomware threat monitoring using ransomware.live API and Claude AI — companion to the SANS Ransomware Intell…☆22Apr 15, 2026Updated 5 months ago
- SOC-in-a-Box for AI purple teaming☆25Updated this week
- A DFIR Incident Response AI bot using local Ollama LLM to derrive automated findings from logs☆18Jan 17, 2026Updated 8 months ago
- Single-file desktop GUI for searching, browsing, and analyzing SQLite databases. Python + tkinter. No install required.☆25Apr 25, 2026Updated 4 months ago
- A curated collection of DFIR skills and workflows for InfoSec practitioners.☆322May 14, 2026Updated 4 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Curated resources, research, and tools for securing AI systems☆873Jul 18, 2026Updated 2 months ago
- A Docker lab integrating Splunk SIEM with Ollama LLM via MCP for AI security operations. Features Promptfoo OWASP evaluation, TA-ollama a…☆34Jul 23, 2026Updated last month
- A framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concret…☆61Mar 5, 2026Updated 6 months ago
- An Obsidian-Based Second Brain for CyberSecurity Analysts and Professionals☆61Feb 18, 2026Updated 7 months ago
- Shattering the 1:10 barrier. A high-velocity alternative to Plaso for the modern IR landscape☆17Jul 6, 2026Updated 2 months ago
- An automated pipeline that leverages LLM's meta-learning capability to iteratively design and refine red-teaming systems without human in…☆31May 24, 2026Updated 3 months ago
- Expand CIDRs or wrangle a list of IPs back to its smallest CIDR blocks possible☆10Apr 5, 2020Updated 6 years ago
- Powershell Scripts to work on Crowdstrike Falcon that pull back raw data relevant to forensic investigation☆23Dec 18, 2024Updated last year
- A comprehensive repository for malware analysis and threat intelligence, including Cobalt Strike Beacon configurations, YARA rules, IOCs,…☆19Mar 6, 2026Updated 6 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- AI-Driven Threat Modeling & Attack Tree Generation with MITRE ATT&CK Integration☆79Aug 1, 2026Updated last month
- DFIR Timeline Analysis for macOS — SQLite-backed viewer for CSV, TSV, XLSX, EVTX, Plaso, $MFT, and $J files with AI Artifacts, AI Secret …☆367Sep 8, 2026Updated last week
- Cyber Threat Intelligence☆83Dec 7, 2025Updated 9 months ago
- PhishCollector is a research framework for collecting, analysing, and tracking phishing sites.☆23Mar 1, 2026Updated 6 months ago
- geolocate ip addresses in IIS logs☆21May 10, 2026Updated 4 months ago
- ATHF is a framework for agentic threat hunting - building systems that can remember, learn, and act with increasing autonomy.☆374Sep 11, 2026Updated last week
- AI-first security scanner. NEW in v2026.7: Claude Code compromise detection — vet .claude/ hooks, permissions & skills before you clone —…☆988Aug 10, 2026Updated last month
- Automatic/Custom Destinations & LNK (MS-SHLLINK) Browser☆51Aug 16, 2026Updated last month
- Automate forensic traige package collection and evidence parsing with KAPE and Crowdstrike☆15Mar 5, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Encrypted command‑and‑control (C2) research framework for cybersecurity education, red team labs, and secure client‑server communication …☆32Mar 15, 2026Updated 6 months ago
- Offline AI Security Assistant for Air-Gapped Pentesting☆87Apr 19, 2026Updated 5 months ago
- MCP to help Defenders Detection Engineer Harder and Smarter☆488Jun 16, 2026Updated 3 months ago
- A Shodan-based tool to discover publicly exposed Ollama instances and list available LLM models.☆24May 27, 2025Updated last year
- AI Red Team Operations Console☆16Jul 5, 2026Updated 2 months ago
- This is the repository for AI for SOC short video series☆19Sep 12, 2025Updated last year
- Contains compiled binaries of Volatility☆37May 18, 2025Updated last year
- Comprehensive security and best practices guide for using Claude Code safely and effectively☆17Mar 29, 2026Updated 5 months ago
- A repo to hold KQL queries as part of my 100 days of KQL effort.☆19Aug 5, 2026Updated last month
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- A comprehensive GenAI protection system designed to protect against malicious prompts, injection attacks, and harmful content. System inc…☆107Aug 20, 2026Updated 3 weeks ago
- CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex. 120+ commands, 57 techniques, 79 typed MCP tools, …☆598Updated this week
- ☆462Mar 4, 2026Updated 6 months ago
- The Eventlog Compendium is the go-to resource for understanding Windows Event Logs.☆58Apr 22, 2025Updated last year
- ☆99Jan 7, 2026Updated 8 months ago
- Various PowerShells scripts I've made (or others have made) to automate some of the boring stuff in my everyday DFIR journey!☆53Jan 9, 2026Updated 8 months ago
- Project based on RegRipper, to extract add'l value/pivot points from TLN events file☆90Feb 9, 2025Updated last year