pocket guide for core threat hunting concepts
☆23May 6, 2020Updated 6 years ago
Alternatives and similar repositories for threat-hunting-pocket-guide
Users that are interested in threat-hunting-pocket-guide are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- pocket guide for core detection engineering concepts☆31May 8, 2023Updated 3 years ago
- A project in Golang that will create prefix-based magic MD5 hashes for type juggling.☆21Jul 29, 2018Updated 8 years ago
- Exploit Development and Reverse Engineering with GDB Made Easy☆18Jun 25, 2019Updated 7 years ago
- Powershell collection designed to assist in Threat Hunting Windows systems.☆27Apr 13, 2018Updated 8 years ago
- Python script to automatically create sigma rules from The hive observables☆25Mar 17, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆15Sep 24, 2024Updated 2 years ago
- Appendix resources for Intrinsec's "Amélioration des capacités de détection" handbook.☆12Mar 26, 2018Updated 8 years ago
- A cyber threat intelligence server based on TAXII 2 and written in Golang☆32Sep 19, 2019Updated 7 years ago
- Various public documents, whitepapers and articles about APT campaigns☆56Apr 1, 2016Updated 10 years ago
- QEMU with rVMI extensions☆26Jul 25, 2017Updated 9 years ago
- A utility to trawl phishing domains and attempt to identify phishing kits as well as other malicious activity☆37Jan 14, 2022Updated 4 years ago
- Testing/collecting some container breakouts☆93Jul 22, 2019Updated 7 years ago
- ☆36Jan 22, 2025Updated last year
- certstream + analytics☆11Jan 17, 2020Updated 6 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Repository resource threat intelligence for SOC☆10Sep 14, 2018Updated 8 years ago
- Converts Sigma detection rules to a Splunk alert configuration.☆12Jul 1, 2021Updated 5 years ago
- Exporting MISP event attributes to yara rules usable with Thor apt scanner☆25Mar 27, 2017Updated 9 years ago
- ☆13Feb 6, 2018Updated 8 years ago
- a shared short domain for XSS and other hacks☆32Mar 3, 2022Updated 4 years ago
- Scripts and rulesets for analysing the Winnti malware☆24Jul 24, 2019Updated 7 years ago
- A tool for studying JavaScript malware.☆15Oct 21, 2026Updated last week
- Personal compilation of APT malware from whitepaper releases, documents and own research☆261Feb 7, 2019Updated 7 years ago
- Repository for my ATT&CK analysis research.☆70May 16, 2019Updated 7 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- FireEye iSIGHT Alert Feeder for TheHive, an Open Source and Free Security Incident Response Platform☆16Oct 12, 2018Updated 8 years ago
- A collection of typical false positive indicators☆55Dec 5, 2020Updated 5 years ago
- Terraform modules for Sumo Logic resources☆17Aug 24, 2026Updated 2 months ago
- This repository contains all public indicators identified by 401trg during the course of our investigations. It also includes relevant ya…☆120Apr 14, 2021Updated 5 years ago
- Creating a Feed of MISP Events from ThreatFox (by abuse.ch)☆18Jun 2, 2021Updated 5 years ago
- An informational repo about hunting for adversaries in your IT environment.☆14Apr 10, 2017Updated 9 years ago
- ☆12Jun 4, 2025Updated last year
- Validates yara rules and tries to repair the broken ones.☆42Sep 5, 2020Updated 6 years ago
- ☆136Jan 24, 2019Updated 7 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Expert Investigation Guides☆51Mar 18, 2021Updated 5 years ago
- YAFRA is a semi-automated framework for analyzing and representing reports about IT Security incidents.☆27Dec 14, 2021Updated 4 years ago
- Automated, Collection, and Enrichment Platform☆324Nov 14, 2019Updated 6 years ago
- Encase Script to parse harddrive for MFT data☆16Jun 17, 2016Updated 10 years ago
- Load Windows Event Log (.evtx) files into Elasticsearch, or export them as JSON lines. Born on an offline threat hunt; rebuilt for Elasti…☆122Oct 7, 2026Updated 3 weeks ago
- A curated list of awesome YARA rules, tools, and people.☆33Oct 26, 2023Updated 3 years ago
- dawg the hallway monitor - monitor operating system changes and analyze introduced attack surface when installing software☆55Nov 14, 2019Updated 6 years ago