This repository contains advanced threat hunting scripts for Cisco Secure Endpoint API. The scripts leverage the AMP API to hunt for threats, analyze endpoint behavior, and detect potential compromises across the environment using API version 0 and 1. Now supporting AI SKILLs concept.
☆14Apr 21, 2026Updated 6 months ago
Alternatives and similar repositories for amphunt
Users that are interested in amphunt are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Nagios HTTP/HTTPS check via wget (with/without Proxy)☆10Nov 5, 2017Updated 8 years ago
- Cisco Advanced Malware Protection (AMP) scripts☆10May 26, 2017Updated 9 years ago
- Hunt for Keywords , Mutex, Windows Event,Registry Keys,Process,Schedule tasks in Windows Machine☆22Dec 8, 2024Updated last year
- Lazy SPL to detect Spring4Shell exploitation☆12Jul 8, 2022Updated 4 years ago
- A repository for useful scripts and files for Cisco Security products.☆26Dec 8, 2022Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆32Jul 1, 2025Updated last year
- A realistic windows testlab deployment tool☆12Feb 24, 2017Updated 9 years ago
- GeoIP plotting script written in Python to help security teams draw visualized reports from IP addresses☆20May 29, 2022Updated 4 years ago
- Yet another introduction to Cisco APIs☆12Jul 4, 2016Updated 10 years ago
- Reworked assets for Azure Sentinel using Cisco Umbrella logs as source. Includes logstash config for Cisco Umbrella using Cisco managed A…☆12Apr 14, 2020Updated 6 years ago
- A Python package to interact with the both on-premises and Office 365 Exchange Web Services☆33May 23, 2023Updated 3 years ago
- Multicore EVTX to Elasticsearch ingestor for incident responders.☆14May 12, 2021Updated 5 years ago
- A PowerShell script that checks for dangerous ACLs on system hives and shadows☆26Jul 21, 2021Updated 5 years ago
- ☆20Apr 15, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Open source offering for the Logscape log management tool.☆28Aug 2, 2021Updated 5 years ago
- Google Music Resolver for the Tomahawk music player☆14May 19, 2013Updated 13 years ago
- HTTP Archive (HAR) command-line tool☆12Jun 27, 2019Updated 7 years ago
- Reads and prints information from the website MalAPI.io☆22Jul 14, 2022Updated 4 years ago
- A curated list of Tezos Ecosystem dApps, tools, and communities.☆14Oct 13, 2026Updated 2 weeks ago
- ☆14Aug 28, 2016Updated 10 years ago
- ☆10Dec 28, 2015Updated 10 years ago
- JSON-based DSLs are not for humans..☆10Sep 4, 2014Updated 12 years ago
- Finds dynamic DNS (like no-ip.org) domains from a given list of domains☆14Sep 17, 2015Updated 11 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Cisco Security published templates and scripts for Public Cloud☆10Jul 6, 2020Updated 6 years ago
- Command Line Interface/Framework for Black Hat CTF Competitors☆10Dec 8, 2022Updated 3 years ago
- This is a script to import Cisco Talos's IP Blacklist into a Tag (Host Group) within Stealthwatch. This will also optionally create a Cu…☆11May 22, 2023Updated 3 years ago
- Yara rules☆10Dec 10, 2019Updated 6 years ago
- Sinkhole Operational Framework for Automation and Reporting☆14May 28, 2014Updated 12 years ago
- Yara rules I've written☆10Dec 9, 2015Updated 10 years ago
- OpenDNS Graph Miner☆45Apr 28, 2017Updated 9 years ago
- Web-based IOC management platform with threat intelligence enrichment for SOC teams☆22Jun 20, 2026Updated 4 months ago
- VMware Snapshot Forensic Comparison Scripts☆26Mar 19, 2013Updated 13 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Make a tree from a HAR file☆14Updated this week
- ☆14May 31, 2017Updated 9 years ago
- Development VMs for DevNet technologies☆10Jul 18, 2015Updated 11 years ago
- A scalable framework for binary analysis in a containered environment.☆13May 20, 2019Updated 7 years ago
- Exploit kit analyzer☆22Mar 3, 2015Updated 11 years ago
- LD_PRELOAD rootkit utils☆16Jul 3, 2015Updated 11 years ago
- A simple script that automates basic pentester reconaissance starting from nmap scans.☆10Dec 10, 2016Updated 9 years ago