Linux Persistence Detection, Hunting and Artifact Collection script
☆26Jul 20, 2026Updated 3 months ago
Alternatives and similar repositories for persisthunt
Users that are interested in persisthunt are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A small PoC for bpfdoor malware technique☆23Feb 2, 2024Updated 2 years ago
- A Compiler from Sigma rules to VQL☆20May 18, 2026Updated 5 months ago
- Automated Malware Behavior Analysis Tool☆12May 13, 2026Updated 5 months ago
- DFIR forensics companion server + capture extension☆32Oct 14, 2026Updated last week
- Track incidents, map attack paths, collaborate in real time, and generate AI-powered reports — all in one place.☆21Updated this week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- AI-powered malware traffic analysis and network forensics via the Model Context Protocol☆19May 27, 2026Updated 4 months ago
- ☆27Oct 12, 2026Updated last week
- The self-hosted KQL query management platform for SOC teams☆22May 20, 2026Updated 5 months ago
- Indicators of compromise from to analysis and research by Nextron Threat Research team☆22Updated this week
- Elasticsearch pipelines for processing and enriching plaso data☆11Feb 6, 2024Updated 2 years ago
- AI-powered SOC for OT/ICS networks — 6 autonomous agents, MITRE ATT&CK mapping, Suricata/Zeek ingestion, human-in-the-loop response, 330+…☆34Aug 6, 2026Updated 2 months ago
- Adversary Simulation Framework☆39Aug 19, 2025Updated last year
- C# Desktop GUI application that either performs YARA scan locally or prepares the scan in Active Directory domain environment with a few …☆37Dec 1, 2021Updated 4 years ago
- ☆15Nov 25, 2021Updated 4 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Links to malware-related YARA rules☆15Sep 29, 2022Updated 4 years ago
- ☆75Updated this week
- Always-on, cross-platform telemetry daemon for AI agent activity. Sysmon for AI agents.☆62Jul 28, 2026Updated 2 months ago
- Collection of scripts provided for public use☆46Aug 19, 2026Updated 2 months ago
- Cross-platform incident response toolkit. 28 pre-built use cases in a single zero-install binary: triage, threat hunting, memory forensic…☆158Jul 28, 2026Updated 2 months ago
- SigLens is a Windows binary analysis tool designed to pinpoint the exact regions responsible for antivirus detections. It narrows detecti…☆42Oct 1, 2026Updated 3 weeks ago
- MalwareScan is a lightweight and fast malware scanner written in Python. It supports both Windows and Linux platforms and provides an ope…☆14Jun 2, 2025Updated last year
- Visualize Microsoft Defender XDR process trees and security events☆33Aug 24, 2025Updated last year
- Fixes the console command that just failed, or the one you are about to run. Learns from you, explains itself, works with coding agents. …☆27Oct 13, 2026Updated last week
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Collection of my own detection rules☆19Updated this week
- Self-hosted threat intelligence platform — feed aggregation, AI triage, MITRE ATT&CK coverage, and Sentinel-integrated detection engineer…☆60Oct 15, 2026Updated last week
- A simple python script to generate nested folders based on user input. The script will also name and place a template report document and…☆12May 6, 2026Updated 5 months ago
- Cloud dead-drop C2 framework — RSA-4096 + AES-256-GCM, 5 cloud providers, Rust-only agents, P2P mesh, persistence engine, credential harv…☆44Updated this week
- ☆16Jun 14, 2023Updated 3 years ago
- Kage 影 is a Windows host DFIR triage console. Point it at a suspect machine, get everything back in one sealed chain: artefact collection…☆30Oct 9, 2026Updated 2 weeks ago
- Tools for Incident Response and Malware Analysis☆11Feb 9, 2025Updated last year
- ☆23Dec 15, 2022Updated 3 years ago
- Sysmon Config Pusher - Modernized☆46Jan 7, 2026Updated 9 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Random tips and tricks RE: ransomware☆14Aug 17, 2021Updated 5 years ago
- PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.☆37Jul 11, 2023Updated 3 years ago
- PiHole Lists☆15Updated this week
- Claude Code mods that fix and translate your prompts before Claude reads them☆13Oct 6, 2026Updated 2 weeks ago
- First-ever decryptor for The Gentlemen ransomware — recovers encryption keys from process memory dumps using X25519 ephemeral key extract…☆31May 21, 2026Updated 5 months ago
- [gravinet] is a self-forming full-mesh, encrypted overlay VPN with a distributed control plane and relay fallback.☆11Oct 11, 2026Updated last week
- MS Graph Commands and Tools for Blue Teamers☆51Feb 4, 2026Updated 8 months ago