A curated list of resources to deep dive into the intersection of applied machine learning and threat detection.
☆19Sep 23, 2020Updated 6 years ago
Alternatives and similar repositories for awesome-ml-for-threat-detection
Users that are interested in awesome-ml-for-threat-detection are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Threat Detection System using Hybrid (Machine Learning + Lexical Analysis) learning Approach.☆11May 30, 2017Updated 9 years ago
- This directory contains random scripts from threat hunting or malware research☆11Feb 15, 2018Updated 8 years ago
- Automated Real-Time Threat Hunting with ATD, Active Response and Elasticsearch/Kibana☆10Aug 17, 2018Updated 8 years ago
- Scripts to aid intrusion and malware detection using the Jamf Agent and Jamf Server☆10May 4, 2022Updated 4 years ago
- Threat Detection & Anomaly Detection rules for popular open-source components☆53Jul 27, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆11Jan 26, 2020Updated 6 years ago
- Threat Feeds, Threat lists, and regular lists of known IP ranges and domains. It updates every 4 hours.☆16May 21, 2021Updated 5 years ago
- 威胁检测规则集☆15Jul 5, 2019Updated 7 years ago
- USB HID driver emulation with PID/VID (0x3bca/0x27bb) of Plenom A/S Busylight Alpha, that is supported by Mimikatz. When mimikatz is exec…☆21Sep 6, 2022Updated 4 years ago
- An ongoing & curated collection of awesome software best practices and remediation techniques, libraries and frameworks, E-books and vide…☆50Nov 11, 2022Updated 3 years ago
- An open source, cloud native toolkit for threat detection and mitigation☆19Sep 2, 2026Updated 2 months ago
- Detect-X Automated Threat Detection by AI☆32Oct 10, 2019Updated 7 years ago
- Domain Connectivity Analysis Tools to analyze aggregate connectivity patterns across a set of domains during security investigations☆47Nov 1, 2021Updated 5 years ago
- CIRCL system forensic tools or a jumble of tools to support forensic☆41Jan 20, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- My personal experience in Threat Hunting and knowledge gained so far.☆19May 27, 2017Updated 9 years ago
- Insider Threat Detection using Isolation Forest☆18Jun 1, 2018Updated 8 years ago
- An example of how to deploy a Detection as Code pipeline using Sigma Rules, Sigmac, Gitlab CI, and Splunk.☆62Mar 12, 2022Updated 4 years ago
- ☆21May 19, 2016Updated 10 years ago
- Small-scale threat emulation and detection range built on Elastic and Atomic Redteam.☆39Dec 17, 2025Updated 10 months ago
- Python client for the Thinkst Canary API☆21Jul 23, 2026Updated 3 months ago
- Threat intelligence and threat detection indicators (IOC, IOA)☆52Nov 27, 2020Updated 5 years ago
- In this project we made a web browser forensic tool which recover deleted history,cache and cookies of chorme and mozilla. The tool simpl…☆17May 13, 2015Updated 11 years ago
- VTC - Velociraptor Timeline Creator☆20May 15, 2024Updated 2 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Alternative password shadowing scheme☆13Oct 11, 2026Updated 3 weeks ago
- ☆11Feb 9, 2023Updated 3 years ago
- Various components we use in labs☆10Oct 30, 2020Updated 6 years ago
- Minimal Indicator Storage System☆12Feb 8, 2021Updated 5 years ago
- Knowledge base of analytics designed to cover threats based on MITRE's ATT&CK.☆23Dec 13, 2018Updated 7 years ago
- Uses Shodan API to pull down C2 servers to run known exploits on them.☆19Dec 9, 2017Updated 8 years ago
- A tool for simplifying the process of researching IOCs.☆25Sep 24, 2021Updated 5 years ago
- ☆34Jun 22, 2021Updated 5 years ago
- Example Dockerfiles for many purposes☆10Nov 26, 2019Updated 6 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- An experimental Velociraptor implementation using cloud infrastructure☆26Oct 28, 2026Updated last week
- Event Query Router☆12Aug 9, 2019Updated 7 years ago
- Scripts to threat optics stack quickly / abbreviated and automated. Run after APT-Lab-Terraform☆13Oct 24, 2020Updated 6 years ago
- Confluence Hardcoded Password POC☆15Jul 30, 2022Updated 4 years ago
- Queries for Carbon Black Response☆11Feb 11, 2020Updated 6 years ago
- ☆18Aug 29, 2025Updated last year
- Collection of Suricata rule sets that I use modified to my environments.☆38Sep 13, 2020Updated 6 years ago