Three datasets to practice Threat Hunting against.
☆48Jan 3, 2024Updated 2 years ago
Alternatives and similar repositories for threat-hunting-samples
Users that are interested in threat-hunting-samples are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Collection of Jupyter Notebook for Threat Hunting and Blue Team Purposes☆22Jun 15, 2022Updated 4 years ago
- Carving tool based in Radare2 & Yara☆16Oct 30, 2018Updated 7 years ago
- A curated list of tools, papers and techniques for Windows exploitation and incident response.☆42Apr 10, 2016Updated 10 years ago
- Repository with Sample threat hunting notebooks on Security Event Log Data Sources☆70Dec 2, 2022Updated 3 years ago
- ☆17Oct 29, 2023Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Powershell collection designed to assist in Threat Hunting Windows systems.☆27Apr 13, 2018Updated 8 years ago
- Incident Response and Forensic on AWS☆20May 19, 2020Updated 6 years ago
- ☆21May 10, 2023Updated 3 years ago
- Osquery Packs we use for customer security hardening☆12Jun 30, 2025Updated last year
- Various commands, tools, techniques that you can use to examine live Windows systems for signs of Compromise or for Threat Hunting.Can al…☆15May 30, 2026Updated last month
- This PowerShell script will automate the setup of a development environment, consisting of all the necessary software tools required to c…☆16Jul 27, 2019Updated 6 years ago
- Vagrant Files to create a Virtualbox VM for Malware Analysis☆13Jun 1, 2021Updated 5 years ago
- Jupyter Notebooks for Digital Forensics & Incident Response☆10Nov 23, 2021Updated 4 years ago
- Grey-box fuzzer SIVO☆13Jul 11, 2021Updated 4 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆14Jun 18, 2026Updated 3 weeks ago
- Monitoring Windows processes tool for malware analysis. Inspired by Regshot tool.☆14Jun 24, 2024Updated 2 years ago
- Crowdstrike Falcon Host script for iterating through instances to get alert and other relevant data☆14Jul 16, 2019Updated 6 years ago
- Security information and event management, masters's diploma☆10Aug 3, 2015Updated 10 years ago
- Mindmaps for threat hunting - work in progress.☆150Mar 15, 2022Updated 4 years ago
- Various Topics☆18Apr 30, 2025Updated last year
- Project to Support The Hunter's Framework (THF)☆11Apr 16, 2024Updated 2 years ago
- Threat Hunting & Incident Investigation with Osquery☆217Mar 30, 2022Updated 4 years ago
- Library of threat hunts to get any user started!☆51Sep 4, 2020Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Stupid Simple Detection Testing☆13Mar 7, 2024Updated 2 years ago
- A dataset with CloudTrail events from an attack simulation using Stratus.☆28Jul 12, 2023Updated 2 years ago
- Misc Threat Hunting Resources☆380Jan 26, 2023Updated 3 years ago
- ☆13Mar 28, 2026Updated 3 months ago
- Windows Events Attack Samples☆2,590Jan 24, 2023Updated 3 years ago
- Some portable tools, some YARA, some Python, and a little bit of love. Not all of these tools can be used in incident response. Use PEs…☆39Apr 27, 2025Updated last year
- Robo-Red-Team: Training platform for blue team cybersecurity professionals☆50Mar 6, 2021Updated 5 years ago
- A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.☆97May 28, 2023Updated 3 years ago
- 🔎 Small exercises to get you used to reading and writing Pattern code!☆19Dec 10, 2021Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Detecting Cobalt Strike Team Servers on targets through traffic telemetry.☆22Aug 13, 2024Updated last year
- The new name is DeTT&CT☆24Jul 8, 2019Updated 7 years ago
- Helping Incident Responders hunt for potential persistence mechanisms on UNIX-based systems.☆17Oct 28, 2023Updated 2 years ago
- Collection of scripts, patterns, tips, notes, etc for Obsidian.md users☆14Mar 5, 2025Updated last year
- A simple many-rules to many-files YARA scanner for incident response or malware zoos.☆27Jun 3, 2018Updated 8 years ago
- A repository with data about APTs☆13Nov 24, 2022Updated 3 years ago
- Threat hunting repo for my independent study on threat hunting with OSQuery☆27Jan 16, 2018Updated 8 years ago