A PowerShell-based script to analyze network logs from CSV files and detect potential beaconing behavior. Supports VirusTotal integration for IP reputation checks.
☆17May 11, 2025Updated last year
Alternatives and similar repositories for BeaconHunter
Users that are interested in BeaconHunter are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆13May 24, 2024Updated 2 years ago
- Advanced Threat Hunting: Ransomware Group☆29Jul 9, 2025Updated last year
- "Pure" powershell command (no dependencies, no special permissions etc') to retrieve change history in an AD group membership. relies on …☆12Nov 30, 2025Updated 11 months ago
- ☆31Aug 2, 2025Updated last year
- Elasticsearch and Kibana stack loaded with CVE List V5, NVD, EPSS and CISA KEV data, re-synced every 15 minutes☆66Updated this week
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- A Docker lab integrating Splunk SIEM with Ollama LLM via MCP for AI security operations. Features Promptfoo OWASP evaluation, TA-ollama a…☆33Jul 23, 2026Updated 3 months ago
- A 30-day hands-on SOC Analyst project simulating real-world cyber attacks using ELK Stack, Mythic C2, osTicket & Elastic Defend. Covers t…☆45Jun 10, 2025Updated last year
- Scripts for importing threat feeds and CTI articles, blogs, and reports into MISP.☆18Jun 28, 2026Updated 4 months ago
- ☆18Aug 29, 2025Updated last year
- Cmdlets for capturing Windows Events☆14Mar 11, 2022Updated 4 years ago
- A Shodan-based tool to discover publicly exposed Ollama instances and list available LLM models.☆25May 27, 2025Updated last year
- Repo for experimenting and testing MCP server builds for CTI-related research.☆27May 13, 2025Updated last year
- 🦞 Carapace - The hard shell that protects your OpenClaw from prompt injection☆23Feb 2, 2026Updated 9 months ago
- Egressbuster is a method to check egress filtering and identify if ports are allowed. If they are, you can automatically spawn a shell.☆12Mar 14, 2018Updated 8 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A threat hunting platform that turns Sigma detection rules into actionable OpenSearch queries, letting security analysts go from 'I need …☆12Dec 11, 2025Updated 10 months ago
- Resources to learn more about Chinese-language cybercrime actors.☆16Oct 14, 2026Updated 2 weeks ago
- ☆26Feb 18, 2025Updated last year
- BloodHound MCP Server☆13Apr 8, 2026Updated 6 months ago
- Basic raw packet sniffer in Python - Cybrary☆12Nov 21, 2017Updated 8 years ago
- ☆15Dec 18, 2025Updated 10 months ago
- A specialized environment for crafting, validating, and testing LimaCharlie detection rules☆15Oct 16, 2026Updated 2 weeks ago
- A agentic Intel to hunt pipeline. Get hunting faster☆16Oct 19, 2026Updated 2 weeks ago
- Open Source Security Operations Center Documentation☆228Jun 30, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ADXFlowmaster helps SecOps teams Threat Hunt suspicious network traffic inside & outside of Azure.☆39Oct 30, 2024Updated 2 years ago
- Security checks for PowerShell in GitHub Actions, built on PSScriptAnalyzer☆12Oct 9, 2026Updated 3 weeks ago
- Adds extensibility to Burp by using a list of payloads to pattern match on HTTP responses highlighting interesting and potentially vulner…☆16Aug 4, 2023Updated 3 years ago
- Decrypts and extracts tokens from TokenBroker cache files in Windows☆14May 20, 2025Updated last year
- Claude Code skill for interacting with Elasticsearch REST API — Query DSL, aggregations, cluster ops, ILM, ES|QL, and more☆28Feb 26, 2026Updated 8 months ago
- M365/Azure adversary simulation tool that generates realistic attack telemetry to help blue teams improve their detection and response ca…☆332Sep 2, 2026Updated 2 months ago
- Awesome-RAG-Safety☆10Apr 25, 2025Updated last year
- Technology and Security Fundamentals☆22Nov 5, 2025Updated 11 months ago
- A silver-and-blue skeuomorphic Obsidian theme. From a Winamp-inspired challenge to a working prototype in 13 minutes.☆14Oct 2, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- An Azure SPN access minimizer☆49Jan 15, 2026Updated 9 months ago
- ☆24Jan 24, 2025Updated last year
- Bulk-run Hayabusa across a folder of triage collections, one run per host, with per-host reports and a cross-host triage dashboard☆19Updated this week
- A secure repository of tools, guides, and cheat sheets for Cyber Crime Investigators, DFIR professionals, OSINT analysts, and Threat Hunt…☆11Aug 15, 2025Updated last year
- A visual, card-based Markdown writing interface for Obsidian.☆15Oct 25, 2026Updated last week
- Find vulnerabilities in AD Group Policy, but do it better than Grouper2 did.☆10Nov 4, 2022Updated 3 years ago
- A NextJS web-app that implements Agora's Conversational AI☆15Dec 29, 2025Updated 10 months ago