SecTor - Not-So-Secret Agents: Deploying AI to Optimize Security Operations
☆50Oct 15, 2025Updated 11 months ago
Alternatives and similar repositories for osquery-forensics-agent
Users that are interested in osquery-forensics-agent are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- how to strangle threats☆67Updated this week
- Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code an…☆63Sep 21, 2026Updated last week
- DeepToad is a library and a tool to clusterize similar files using fuzzy hashing☆20Apr 5, 2020Updated 6 years ago
- SYARA: Super YARA Rules for GenAI Era☆20Mar 5, 2026Updated 6 months ago
- Tools and scripts to deploy and manage OpenRelik instances☆17Mar 23, 2026Updated 6 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Kitsune 🦊 A LangGraph workflow for crafting detections against emerging tradecraft.☆14Apr 20, 2026Updated 5 months ago
- Powershell sandboxing utility☆19Sep 25, 2026Updated last week
- Powershell Scripts to work on Crowdstrike Falcon that pull back raw data relevant to forensic investigation☆23Dec 18, 2024Updated last year
- Malice Yara Plugin☆29Sep 8, 2019Updated 7 years ago
- Measurement system I built during my PhD to collect and analyse large-scale datasets; including phishing and malware attacks on Twitter, …☆16Jun 25, 2021Updated 5 years ago
- A recon tool for GCP Service Account Keys that requires no permissions☆28Apr 14, 2025Updated last year
- Linux #rootkit and #malware revealer☆31Aug 1, 2024Updated 2 years ago
- PowerShell script that aim to help uncovering (eventual) persistence mechanisms deployed by a threat actor following an Active Directory …☆98Jan 13, 2026Updated 8 months ago
- Some of my rough notes for Docker threat detection☆51Aug 26, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- External twitter feeder for AIL framework☆16Apr 16, 2023Updated 3 years ago
- Tool to read EVTX files including SYSMON and convert to JSON, MISP Objects and Graph stream☆12Oct 29, 2020Updated 5 years ago
- Kubernetes Kubelet RCE Automated Script. Utilizes both "run" and "exec" debug handlers.☆10Sep 28, 2020Updated 6 years ago
- The code in this repository which function is to extract the shellcode from the maldoc.☆10Jul 17, 2023Updated 3 years ago
- Sample SecOps scripts and Utilities☆12Jun 19, 2024Updated 2 years ago
- AIFT is a GUI, CLI, REST API, and MCP tool that helps DFIR analysts get oriented quickly. Point it at disk images, VM images, forensic ar…☆48Jun 13, 2026Updated 3 months ago
- Small web frontend for using openAI's GPT-3.5 and GPT-4's API☆59Aug 3, 2026Updated 2 months ago
- Code for BH21 talk: "Generating YARA Rules by Classifying Malicious Byte Sequences"☆17Feb 6, 2025Updated last year
- A formula to calculate bounty amounts.☆15Dec 2, 2017Updated 8 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 🤖 A GitHub action that leverages fabric patterns through an agent-based approach☆35Aug 12, 2026Updated last month
- Load MISP events into memcached for log enrichment using logstash☆12Jul 10, 2020Updated 6 years ago
- Repo with supporting material for the talk titled "Cracking the Beacon: Automating the extraction of implant configurations"☆11Feb 6, 2025Updated last year
- MCP server for using the REMnux malware analysis toolkit via AI assistants☆124Sep 21, 2026Updated last week
- Rust crate providing an easy way to build XML documents☆14Mar 15, 2026Updated 6 months ago
- AI-Driven Threat Modeling & Attack Tree Generation with MITRE ATT&CK Integration☆80Aug 1, 2026Updated 2 months ago
- Ghidra变强术，一个Ghidra脚本库，二进制安全，PWN☆12Jan 21, 2024Updated 2 years ago
- A collection of utilities to help with analysis on the command line.☆18Aug 9, 2024Updated 2 years ago
- The OWASP SAMM Website☆13Sep 22, 2026Updated last week
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Cyber Threat Defense World Modeling☆26May 13, 2026Updated 4 months ago
- Signatures and IoCs from public Volexity blog posts.☆373Updated this week
- Vuls Beater for Elasticsearch - connecting vuls☆17Dec 15, 2020Updated 5 years ago
- ☆122May 26, 2025Updated last year
- Check if IP address is part of AWS infrastructure☆18Dec 2, 2020Updated 5 years ago
- A guide on how to write fast and memory friendly YARA rules☆175Feb 11, 2025Updated last year
- Source code for mackorone/spotify-playlist-archive☆13Aug 19, 2026Updated last month