A comprehensive PowerShell-based threat hunting and incident response framework for Windows environments, built around Sysmon event analysis and forensic investigation capabilities.
☆59Jul 17, 2025Updated last year
Alternatives and similar repositories for Garuda-framework
Users that are interested in Garuda-framework are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Utility for ClickOnce usage for Red Teams.☆15Jun 11, 2026Updated 2 months ago
- Convert Sigma rules to SIEM queries, directly in your browser.☆122Updated this week
- Public exploits☆16May 28, 2018Updated 8 years ago
- Spotter is a comprehensive Kubernetes security scanner that uses CEL-based rules to identify security vulnerabilities, misconfigurations,…☆76Sep 13, 2025Updated 11 months ago
- Training scenarios for cyber ranges☆15Apr 24, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A phase-aware multi-model ML framework emulating adversarial behavior across the Cyber Kill Chain using MITRE ATT&CK. ATTACK-BERT maps te…☆16Apr 10, 2026Updated 4 months ago
- From Chaos to Clarity. Turning Raw Windows Logs into Executive Insights. Looking for Indicators of Compromise.☆48Oct 20, 2025Updated 10 months ago
- WELA (Windows Event Log Analyzer, ゑ羅) is a tool for auditing and configuring Windows event log settings. Windows event logs are a vital s…☆118Aug 1, 2026Updated 3 weeks ago
- PacketSled's Bro AMQP Writer Plugin☆11Aug 5, 2016Updated 10 years ago
- Browser-based Android security auditing tool.☆81Aug 7, 2026Updated 2 weeks ago
- Blackdagger is a DAG based automation tool specifically used in DevOps, DevSecOps, MLOps, MLSecOps, and Continuous Red Teaming (CART).☆118Jun 21, 2026Updated 2 months ago
- Collection of videos of Raids on Cybercriminals☆22Mar 19, 2025Updated last year
- A sysmon configuration designed for monitoring RMM solutions from the LOLRMM framework on the OS Microsoft Windows. 10/11☆33Feb 17, 2026Updated 6 months ago
- The "DFUR" Splunk application and data that was presented at the 2020 SANS DFIR Summit.☆13Sep 9, 2020Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- From Patch to PoC☆32Nov 19, 2025Updated 9 months ago
- MCP Documentation Server Using the Official FedRAMP/docs Repo☆18Apr 15, 2026Updated 4 months ago
- Browser based Privacy Aware SBoM Exploration☆37Aug 6, 2026Updated 2 weeks ago
- ☆30Aug 22, 2019Updated 7 years ago
- VeilTransfer is a data exfiltration utility designed to test and enhance the detection capabilities. This tool simulates real-world data …☆158Dec 26, 2025Updated 7 months ago
- PowerShell tool to deploy deceptive Active Directory objects, and audit them☆16Jan 7, 2026Updated 7 months ago
- macOS .DS_Store Parser☆81Aug 17, 2021Updated 5 years ago
- Windows Scripts☆12Apr 2, 2020Updated 6 years ago
- Pool Overflow in OpenVpn NDIS TAP Driver☆17Nov 3, 2015Updated 10 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Burp Suite plugin created for using Collaborator tool during manual testing☆19Feb 4, 2022Updated 4 years ago
- A powerful macOS triage collection tool designed for forensic analysis. It gathers critical system artifacts such as FSEvents, Spotlight,…☆48Oct 24, 2025Updated 10 months ago
- Projects that show my knowledge and experience of Cyber Security.☆15Jan 27, 2022Updated 4 years ago
- A Python script for indexing (putting) FireEye alert data into Elasticsearch...and notifying you too.☆16Dec 11, 2018Updated 7 years ago
- A tool to grab session cookies of any website from an android phone and by-pass 2FA.☆11May 8, 2020Updated 6 years ago
- TTPMapper is an AI-driven threat intelligence parser that converts unstructured reports whether from web URLs or PDF files into structure…☆58Jun 21, 2025Updated last year
- Meeting notes☆14Apr 5, 2016Updated 10 years ago
- PoC for generating an APPWIZ.cpl module designed to be loaded by Fondue.exe LOLBin☆16Jan 2, 2026Updated 7 months ago
- Critical Success Factor (CSF) tutorial☆20Apr 14, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆14Feb 10, 2021Updated 5 years ago
- ☆15May 30, 2026Updated 2 months ago
- A Model Context Protocol (MCP) server that integrates Volatility 3 memory forensics framework with Claude☆39Jul 7, 2025Updated last year
- Your Open-Source SOC Assistant☆12Apr 5, 2023Updated 3 years ago
- ISO 42001 Lead Implementer Toolkit - Complete guide with case studies, templates, and implementation resources for AI Security Management…☆25Nov 30, 2025Updated 8 months ago
- Run DependencyCheck Against Your Orgs GitHub Repos.☆14Jan 5, 2018Updated 8 years ago
- Huntress API☆11May 26, 2022Updated 4 years ago