CTI resources for Claude, maintained by Feedly
☆38Oct 21, 2026Updated 2 weeks ago
Alternatives and similar repositories for skills
Users that are interested in skills are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆28Updated this week
- ☆16Aug 18, 2026Updated 2 months ago
- Forensic extractor for Claude Code and Claude Cowork local state — macOS/Windows captures☆27Jun 16, 2026Updated 4 months ago
- Adversarial Detection Engineering knowledge base — ADE taxonomy, worked technique files, platform bug patterns, mitigations, and purple-t…☆88Sep 30, 2026Updated last month
- A schema-aware dataset and Claude AI skill for Microsoft Defender XDR Advanced Hunting.☆36May 6, 2026Updated 6 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Open, practitioner-maintained Detection Engineering curriculum.☆23Updated this week
- Velociraptor ai skills☆20Nov 3, 2026Updated last week
- A complete Sigma detection engineering toolkit: parser, linter, formatter, evaluator, correlation engine, conversion framework, streaming…☆186Updated this week
- ☆25Jul 12, 2023Updated 3 years ago
- CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex. 120+ commands, 57 techniques, 79 typed MCP tools, …☆623Updated this week
- Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code an…☆66Oct 29, 2026Updated last week
- ThreatShield is an AI-powered malware analysis platform that combines static and dynamic analysis and machine learning to detect and expl…☆16Mar 23, 2026Updated 7 months ago
- A skill to help cybersecurity folks update and tweak their resume☆190Sep 20, 2026Updated last month
- Autonomous DFIR agent — SANS SIFT Workstation MCP server for incident response☆69Oct 30, 2026Updated last week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Microsoft Sentinel SIEM Log Source Analyzer☆31Oct 27, 2026Updated 2 weeks ago
- A public repository of quality research on cyber attack techniques. This is the backend for the Technique Research Report (TRR) Library.☆35Updated this week
- A 'code-mode' MCP server that allows LLMs to safely generate and execute JavaScript code that performs forensic analysis and employs trad…☆41Updated this week
- Python client for DFIR-IRIS☆31Aug 19, 2024Updated 2 years ago
- Open test set of .eml emails for checking how email security controls and AI mailbox assistants handle indirect prompt injection. It cros…☆22Oct 31, 2026Updated last week
- A production-ready, enterprise-grade MDR framework that transforms chaotic security alerts into structured, actionable intelligence.☆28Feb 14, 2026Updated 8 months ago
- Prevention-focused living-off-the-land testing framework mapped to MITRE ATT&CK.☆30Jul 24, 2026Updated 3 months ago
- Complete Claude skills toolkit for professional malware analysis. 5 specialized skills covering triage, dynamic analysis, detection engin…☆54Sep 5, 2026Updated 2 months ago
- ☆19Jul 21, 2022Updated 4 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Threat feeds designed to extract adversarial TTPs and IOCs, using: ✨AI✨☆75Jun 17, 2026Updated 4 months ago
- An AI-backed threat hunting assistant that aligns to the PEAK framework.☆66Jun 1, 2026Updated 5 months ago
- The Kerberoasting / AD password-audit wordlist I use on engagements: priority-merged HashMob large list + The-Viper-One's kerberoast_pws,…☆16Oct 2, 2026Updated last month
- ☆22Jul 13, 2026Updated 3 months ago
- Web path scanner☆12Feb 27, 2019Updated 7 years ago
- Windows / Linux Local Privilege Escalation Workshop☆11Jan 15, 2019Updated 7 years ago
- nuclei-templates-cutomer☆10Apr 6, 2026Updated 7 months ago
- ☆13Sep 13, 2026Updated last month
- ☆14Sep 2, 2026Updated 2 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆14Jul 16, 2026Updated 3 months ago
- Run TTPs, with AI!☆144Feb 23, 2026Updated 8 months ago
- Claude Code skills and plugins☆13Apr 17, 2026Updated 6 months ago
- Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulat…☆35Oct 20, 2026Updated 3 weeks ago
- CrowdStrike Falcon Advanced Threat Hunting Queries☆14Aug 19, 2026Updated 2 months ago
- Highlight changed text after an operation. Purely lua / Nvim API implementation, no external dependencies needed.☆15Sep 24, 2024Updated 2 years ago
- hunt.md: an open, plain-text format for threat hunts. Spec, examples and tooling.☆42Oct 29, 2026Updated last week
Are these results useful?