Alternatives and similar repositories for Threat-Hunting

Users that are interested in Threat-Hunting are comparing it to the libraries listed below

• loganflook / PowerShell-Scripts
  Repo to hold my PowerShell Scripts
  ☆17Updated 2 years ago
• archanchoudhury / Threat-Hunting
  This Repository gives the best and possible strategies against hunting the ransomware
  ☆26Updated 3 years ago
• jgasmussen / Linux-Baseline-and-Forensic-Triage-Tool
  Linux Baseline and Forensic Triage Tool - BETA
  ☆57Updated 3 years ago
• ashemery / WindowsDFIR
  Repository for different Windows DFIR related CMDs, PowerShell CMDlets, etc, plus workshops that I did for different conferences or event…
  ☆78Updated 4 years ago
• Humoud / BackBag-Lab-VM
  Small enough to carry on your back (Backpack) 🎒💻
  ☆32Updated 2 years ago
• alwashali / detection-validation
  Detection rule validation
  ☆41Updated last year
• montysecurity / InfraHunter
  Actively hunt for attacker infrastructure by filtering Shodan results with URLScan data.
  ☆61Updated last year
• rj-chap / BaselineTraining
  Notes from my "Implementing a Kick-Butt Training Program: Blue Team GO!" talk
  ☆12Updated 6 years ago
• freeload101 / Bloodhound-Portable
  Bloodhound Portable for Windows
  ☆53Updated 2 years ago
• simeononsecurity / Blue-Team-Tools
  A collection of scripts, tools. and configs for various OS'es and applications, all free and or open-source, to assist in impromptu Blue-…
  ☆102Updated last year
• vc0RExor / Malware-Threat-Reports
  A full analysis report detailing as much as possible of a Malware or a Threat
  ☆30Updated last year
• tothi / smbmap
  SMBMap is a handy SMB enumeration tool - here with Kerberos support
  ☆73Updated 3 years ago
• 3gbCyber / IR-Last-Write-Time
  Simple Script to Help You Find All Files Has Been Modified, Accessed, and Created In A Range Time.
  ☆27Updated 2 years ago
• DefensiveOrigins / DO-LAB
  ☆47Updated 4 months ago
• paladin316 / ThreatHunting
  This repo is where I store my Threat Hunting ideas/content
  ☆88Updated 2 years ago
• jstrosch / subcrawl
  SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…
  ☆54Updated 9 months ago
• elementalsouls / DumpLSASS
  ☆33Updated last year
• huebicode / abuselookup-gui
  A GUI to query the API of abuse.ch.
  ☆70Updated 3 years ago
• gsiddharth29 / Threat-Hunting
  Threat Hunt Investigation Methodology and Procedure
  ☆15Updated 3 years ago
• mamun-sec / NetDahar
  A network logging tool that logs per process activities
  ☆32Updated 2 years ago
• op7ic / OS.LAB
  Operating System testbed created with Terraform to test payloads, programs and compatibility on different OS versions. Supports AWS and A…
  ☆19Updated last year
• DeanOfCyber / Active-Directory-Penetration-Testing-and-Security
  Resources for AD penetration testing and security
  ☆32Updated 3 years ago
• Atomics-on-A-Friday / Emulation-Tools
  ☆32Updated 2 years ago
• McL0vinn / Windows-Forensic-Examination-and-Threat-Hunting
  Various commands, tools, techniques that you can use to examine live Windows systems for signs of Compromise or for Threat Hunting.Can al…
  ☆12Updated 3 years ago
• mr-r3b00t / parse_win_log
  ☆14Updated 3 years ago
• bobby-tablez / Enable-All-The-Logs
  This script enhances endpoint logging telemetry for the purpose of advanced malware threat detection or for building detections or malwar…
  ☆33Updated 5 months ago
• Almorabea / Catalyzer
  A small tool that helps Incident responders and SOC analysts do a quick and initial analysis/assessment of malicious files
  ☆27Updated 2 years ago
• Sam0x90 / CB-Threat-Hunting
  CarbonBlack EDR detection rules and response actions
  ☆71Updated 11 months ago
• DFIRKuiper / Hoarder
  ☆19Updated 3 years ago
• CyberSecurityUP / Adversary-Emulation-Guide
  ☆21Updated 2 years ago