Prevention-focused living-off-the-land testing framework mapped to MITRE ATT&CK.
☆29Jul 24, 2026Updated 2 months ago
Alternatives and similar repositories for Magic-Atomics
Users that are interested in Magic-Atomics are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Self-hosted threat intelligence platform — feed aggregation, AI triage, MITRE ATT&CK coverage, and Sentinel-integrated detection engineer…☆60Updated this week
- A threat hunting process☆144Oct 2, 2026Updated 2 weeks ago
- Python CLI tool for rapid IOC analysis (IPs, Domains, CVEs) using 6 free Threat Intel APIs. Outputs: Color-coded Excel, JSON, CSV. Uses: …☆25Sep 18, 2026Updated last month
- Always-on, cross-platform telemetry daemon for AI agent activity. Sysmon for AI agents.☆61Jul 28, 2026Updated 2 months ago
- EntraTrace is a defensive security research tool for tracking and identifying the behavior of offensive tooling targeting Microsoft Entra…☆122Updated this week
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Detection engineering with durable memory, a five-stage lifecycle, and an agentic surface — the sibling of ATHF.☆33Updated this week
- A command-line tool to mount SMB shares and scan them for secrets using NoseyParker.☆36Sep 23, 2026Updated 3 weeks ago
- hunt.md: an open, plain-text format for threat hunts. Spec, examples and tooling.☆41Sep 20, 2026Updated last month
- P-BitM is a containerized platform for controlled and weaponized Browser-in-the-Middle☆42Updated this week
- Optimal stopping package for LLM evaluations☆24Sep 13, 2026Updated last month
- Autonomous DFIR agent — SANS SIFT Workstation MCP server for incident response☆66Oct 3, 2026Updated 2 weeks ago
- ☆30Updated this week
- A simple tool to identify WDS servers in Active Directory☆33Aug 25, 2025Updated last year
- CTI resources for Claude, maintained by Feedly☆35Oct 7, 2026Updated last week
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A Burp extension that easily allows for switching a request's session (headers, cookies) on the fly☆33Jun 17, 2026Updated 4 months ago
- LLM-driven generator for Mythic Agents, Payload-Type and C2 Profiles.☆55Aug 24, 2026Updated last month
- Tool to audit SAP Hana DB based on https://help.sap.com/docs/SAP_HANA_PLATFORM/742945a940f240f4a2a0e39f93d3e2d4/45955420940c4e80a1379bc72…☆13Nov 20, 2025Updated 11 months ago
- Open test set of .eml emails for checking how email security controls and AI mailbox assistants handle indirect prompt injection. It cros…☆20Oct 2, 2026Updated 2 weeks ago
- Master the art of cloud exploitation. A specialized resource for offensive security researchers and red teamers focused on weaponizing vu…☆35Oct 10, 2026Updated last week
- Open-source PowerShell toolkit for Microsoft 365 security investigations - Read-only compromise assessment☆86Mar 9, 2026Updated 7 months ago
- Create Entra Global Admin accounts from On-Prem☆25Jul 28, 2025Updated last year
- C# implementation of the process injection techniques dubbed "PoolParty"☆18Nov 7, 2025Updated 11 months ago
- cryptoptic☆19Sep 22, 2026Updated 3 weeks ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Automated threat intelligence collector built with Python and GitHub Actions — fetches recent IOCs from open sources, normalizes and enri…☆16Updated this week
- open-source pentest management built to be operated by an AI agent☆28Sep 1, 2026Updated last month
- WINFLESHER v2.0 - ATTACK SURFACE SECURITY FRAMEWORK☆26Sep 21, 2026Updated 3 weeks ago
- Adversarial Detection Engineering knowledge base — ADE taxonomy, worked technique files, platform bug patterns, mitigations, and purple-t…☆84Sep 30, 2026Updated 2 weeks ago
- PoC that downloads an executable from a public SSL certificate☆138Jul 27, 2025Updated last year
- Public research documentation, methodology, and STIX examples for TI Mindmap HUB - an AI-powered Cyber Threat Intelligence platform☆20Sep 29, 2026Updated 3 weeks ago
- Community-driven PowerShell detection indicators☆46Jan 27, 2026Updated 8 months ago
- Operational Relay Box Intelligence, Tracking, & Analysis Lexicon (ORBITAL)☆38Aug 30, 2026Updated last month
- Dont Gamble with Risk☆14Mar 4, 2024Updated 2 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Jevline: start from one confirmed-malicious process; Jev links the rest of the incident into a timeline, execution chain and evidence tab…☆42Updated this week
- Sysmon Config Pusher - Modernized☆46Jan 7, 2026Updated 9 months ago
- Kumo 蜘蛛 is a domain OSINT & security reconnaissance framework. Drop a domain, get everything back in real time across 27 parallel module…☆70Oct 9, 2026Updated last week
- Kage 影 is a Windows host DFIR triage console. Point it at a suspect machine, get everything back in one sealed chain: artefact collection…☆30Oct 9, 2026Updated last week
- A Kubernetes Forensic Collection Framework for Azure Kubernetes Service☆44Feb 9, 2026Updated 8 months ago
- Salesforce identity and permission graph collector for BloodHound CE. Maps users, profiles, permission sets, roles, groups, sharing rules…☆50Jul 30, 2026Updated 2 months ago
- A VS Code plugin to execute arbitrary JavaScript code at runtime over a local HTTP endpoint.☆33Feb 10, 2026Updated 8 months ago