Linux Persistence Detection, Hunting and Artifact Collection script
☆30Oct 31, 2026Updated last week
Alternatives and similar repositories for persisthunt
Users that are interested in persisthunt are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Collection of scripts provided for public use☆46Updated this week
- Rust-based Fast Forensics Tool for Windows☆15Aug 9, 2026Updated 3 months ago
- A Compiler from Sigma rules to VQL☆21Oct 19, 2026Updated 3 weeks ago
- Collection of my own detection rules☆20Oct 21, 2026Updated 3 weeks ago
- Automated Malware Behavior Analysis Tool☆12May 13, 2026Updated 5 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Self-hosted multi-engine Sigma detection for event logs☆46Nov 1, 2026Updated last week
- 32 production-quality KQL detection rules for Microsoft Sentinel, mapped to MITRE ATT&CK for Cloud, credential access, lateral movement, …☆15Aug 1, 2026Updated 3 months ago
- Track incidents, map attack paths, collaborate in real time, and generate AI-powered reports — all in one place.☆21Oct 25, 2026Updated 2 weeks ago
- DFIR forensics companion server + capture extension☆36Updated this week
- A Public Package Scanner for The Community☆13Jan 14, 2026Updated 9 months ago
- Self-hosted MDM for Linux fleets. Enrollment, profiles, disk encryption, lock and wipe, OS updates and remote assistance with each distri…☆23Oct 28, 2026Updated 2 weeks ago
- This Repository is created after my own research into malicious browser extensions, by brining the work of many others and news articles …☆32Oct 15, 2026Updated 3 weeks ago
- Automated YARA rule generation from the Cert Central compromised certificate database.☆17Updated this week
- Windows EVTX log analysis for DFIR — fast parsing, ATT&CK mapping, IOC extraction, and Sentinel anomaly detection. Normal + Juggernaut Mo…☆62Updated this week
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- MemGuard v2.0 (by @prox0959) - Zero-dependency Windows EDR utility: NT kernel handle table auditor, NTDLL syscall hook detector & credent…☆19Oct 24, 2026Updated 2 weeks ago
- Bounded-state streaming scanner for web, source, and file content pipelines☆10Jun 19, 2026Updated 4 months ago
- Elasticsearch pipelines for processing and enriching plaso data☆11Feb 6, 2024Updated 2 years ago
- Adversary Simulation Framework☆39Aug 19, 2025Updated last year
- Repository created to share information about tactics, techniques and procedures used by threat actors. Initially with ransomware groups …☆51Updated this week
- An extensible, deterministic static‑analysis engine that extracts high‑signal IOCs from PE binaries and text, built for SOC automation an…☆30Sep 9, 2026Updated 2 months ago
- Polymorphic AV/AMSI bypass toolkit - Donut shellcode runner for offensive .NET/PE tools☆40May 26, 2026Updated 5 months ago
- Scapy hands-on at #GreHack17☆17Nov 14, 2017Updated 8 years ago
- ☆15Nov 25, 2021Updated 4 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Visual Studio Code Microsoft Sysinternal Sysmon configuration file extension.☆54Oct 12, 2026Updated last month
- Windows host hardening auditor and remediation tool in PowerShell: CIS, DISA STIG, Essential Eight checks, reversible fixes, optional AI …☆25Updated this week
- Links to malware-related YARA rules☆15Sep 29, 2022Updated 4 years ago
- C# Desktop GUI application that either performs YARA scan locally or prepares the scan in Active Directory domain environment with a few …☆37Dec 1, 2021Updated 4 years ago
- AI-powered SOC for OT/ICS networks — 6 autonomous agents, MITRE ATT&CK mapping, Suricata/Zeek ingestion, human-in-the-loop response, 330+…☆35Aug 6, 2026Updated 3 months ago
- Security content lifecycle management for Microsoft Sentinel and Microsoft Defender XDR.☆17Updated this week
- surface-watch monitors the authorized external attack surface of an organization over time☆55May 11, 2026Updated 6 months ago
- Remote access and Antivirus Logging Database☆45Apr 27, 2026Updated 6 months ago
- A PoC Cobalt Strike UDRL written in Rust☆35Sep 12, 2026Updated 2 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Autonomous 23-Source Zero-Cost OSINT, Binary Image Forensics (EXIF/GPS/Stego), Data Breach/Leak & Threat Intelligence Engine in Pure Pyth…☆28Updated this week
- Prevention-focused living-off-the-land testing framework mapped to MITRE ATT&CK.☆31Jul 24, 2026Updated 3 months ago
- MalwareScan is a lightweight and fast malware scanner written in Python. It supports both Windows and Linux platforms and provides an ope…☆14Jun 2, 2025Updated last year
- Cross-platform incident response toolkit. 28 pre-built use cases in a single zero-install binary: triage, threat hunting, memory forensic…☆162Jul 28, 2026Updated 3 months ago
- Visualize Microsoft Defender XDR process trees and security events☆33Aug 24, 2025Updated last year
- Active Directory forensic framework☆11May 26, 2016Updated 10 years ago
- 🤖 The Modern, Blazing Fast Port Scanner 🤖☆28Dec 29, 2024Updated last year
Are these results useful?