how to strangle threats
☆59Aug 3, 2026Updated this week
Alternatives and similar repositories for detection-chokepoints
Users that are interested in detection-chokepoints are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Kitsune 🦊 A LangGraph workflow for crafting detections against emerging tradecraft.☆15Apr 20, 2026Updated 3 months ago
- Autonomous, read-only endpoint investigation via MCP. Ask a question about your fleet, get a narrative answer with containment recommenda…☆22Jul 6, 2026Updated 3 weeks ago
- Detection engineering template☆15Jul 24, 2025Updated last year
- Helping defenders learn and validate npm supply-chain detections with safe atomic tests.☆34Oct 30, 2025Updated 9 months ago
- ☆21Jul 13, 2026Updated 3 weeks ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- DriverSentinel is a security tool developed in Go that detects malicious and vulnerable drivers on Windows systems by comparing them agai…☆36Jul 28, 2026Updated last week
- Online resources related to Detection Engineering. Detection rules, detection logic, attack samples, detection tests and emulation tools…☆177Jul 14, 2026Updated 3 weeks ago
- Generate realistic synthetic security logs for cybersecurity threat hunting training and research☆199Updated this week
- Interactive PowerShell framework for testing WMI, COM, LOLBAS, and persistence techniques☆130Dec 28, 2025Updated 7 months ago
- A schema-aware dataset and Claude AI skill for Microsoft Defender XDR Advanced Hunting.☆36May 6, 2026Updated 3 months ago
- Run TTPs, with AI!☆140Feb 23, 2026Updated 5 months ago
- MCP to help Defenders Detection Engineer Harder and Smarter☆467Jun 16, 2026Updated last month
- Detection tells you a key is real; geiger tells you whether it's dangerous.☆34Updated this week
- Threat feeds designed to extract adversarial TTPs and IOCs, using: ✨AI✨☆74Jun 17, 2026Updated last month
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Public repository for Red Canary Research☆38Oct 29, 2020Updated 5 years ago
- A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters …☆332Updated this week
- A framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concret…☆57Mar 5, 2026Updated 5 months ago
- SecTor - Not-So-Secret Agents: Deploying AI to Optimize Security Operations☆45Oct 15, 2025Updated 9 months ago
- Active Directory Attack Architecture Map Comprehensive Pentest Reference — From Recon to Domain Dominance☆29Feb 17, 2026Updated 5 months ago
- User-mode ETW interception and telemetry manipulation lab for Windows security research.☆43Jun 15, 2026Updated last month
- A public repository of quality research on cyber attack techniques. This is the backend for the Technique Research Report (TRR) Library.☆28Jul 22, 2026Updated 2 weeks ago
- Create honeypots for cloud environments☆116Oct 6, 2025Updated 9 months ago
- ⚡ AI-powered cybersecurity CLI tool for Kali Linux | Ethical hacking | Penetration testing | Bug bounty☆39May 20, 2026Updated 2 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Living Under the Land on Linux ~ Bsides Belfast/Vienna 2025☆38Nov 22, 2025Updated 8 months ago
- ☆11Dec 17, 2024Updated last year
- Cyber Threat Defense World Modeling☆25May 13, 2026Updated 2 months ago
- Deploy agents easily☆108Feb 6, 2026Updated 6 months ago
- Open-source, self-hosted OSINT investigation platform: turn documents into a live, investigated entity graph. Autonomous agent, graph ana…☆53Jun 15, 2026Updated last month
- This project is an Ansible Role to execute Atomic Red Team tests against multiple machines by wrapping Invoke-AtomicRedTeam☆28Jul 4, 2024Updated 2 years ago
- Detection Reliability And Precision Efficiency (DRAPE) is an index used to assess detection performance☆36Nov 17, 2025Updated 8 months ago
- Local forensic scanner that extracts credentials from AI tool conversation history. For authorized red team and DLP use only.☆57Updated this week
- The standard Go net.Conn interface using Azure Storage services as the transport layer.☆32Mar 19, 2026Updated 4 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- How can you track the hunting techniques you come up with?☆13Sep 3, 2017Updated 8 years ago
- Convert Sigma rules to SIEM queries, directly in your browser.☆121Jun 20, 2026Updated last month
- Indicators of Normality☆11Jul 22, 2022Updated 4 years ago
- For testing or trolling LLM based pentesting frameworks.☆18Feb 18, 2026Updated 5 months ago
- Code canaries to quickly triage hallucinated ('slop') vulnerability reports☆96May 20, 2026Updated 2 months ago
- Inline proxy for software package registries to provide observability and policy controls to installs.☆51Jun 5, 2026Updated 2 months ago
- Cross-platform incident response toolkit. 28 pre-built use cases in a single zero-install binary: triage, threat hunting, memory forensic…☆155Jul 28, 2026Updated last week