SecTor - Not-So-Secret Agents: Deploying AI to Optimize Security Operations
☆51Oct 15, 2025Updated last year
Alternatives and similar repositories for osquery-forensics-agent
Users that are interested in osquery-forensics-agent are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Repo to hold mcp server for velociraptor☆43Oct 11, 2026Updated last month
- Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code an…☆66Oct 29, 2026Updated 2 weeks ago
- A modern open-source Kubernetes auditing and investigation tool☆22Apr 10, 2026Updated 7 months ago
- how to strangle threats☆70Updated this week
- DeepToad is a library and a tool to clusterize similar files using fuzzy hashing☆20Apr 5, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Parser for Sdba memory pool tags☆20Jul 16, 2021Updated 5 years ago
- Just Another broken Registry Parser (JARP)☆16May 23, 2024Updated 2 years ago
- PowerShell script that aim to help uncovering (eventual) persistence mechanisms deployed by a threat actor following an Active Directory …☆98Jan 13, 2026Updated 9 months ago
- python3 scripts to help with aws triage needs☆14Feb 11, 2022Updated 4 years ago
- Virus Total Free - IOC parser and report generator☆25Mar 19, 2023Updated 3 years ago
- SYARA: Super YARA Rules for GenAI Era☆20Oct 12, 2026Updated last month
- Kitsune 🦊 A LangGraph workflow for crafting detections against emerging tradecraft.☆16Apr 20, 2026Updated 6 months ago
- 🐻❄️ 🏹 Threat hunting with Polars and flaws.cloud AWS CloudTrail datasets.☆16May 22, 2024Updated 2 years ago
- Frida example to trace VBA CreateObject calls and some string deobfuscations calls. You need latest Frida 12.9.8 for improved symbol look…☆25Sep 3, 2020Updated 6 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- DevOps for Hackers with Hands-On Labs w/ Ralph May (4-Hour Workshop)☆20Aug 2, 2021Updated 5 years ago
- Log examples of vCenter Server Authentication & Authorization activities☆17Apr 8, 2019Updated 7 years ago
- Powershell Scripts to work on Crowdstrike Falcon that pull back raw data relevant to forensic investigation☆23Dec 18, 2024Updated last year
- ☆26Aug 31, 2023Updated 3 years ago
- workflows and agents configuration☆13Apr 13, 2026Updated 6 months ago
- Powershell sandboxing utility☆19Updated this week
- A tool designed to extract data from a logical ReFS 3.4 forensic image produced by FTK Imager☆18Nov 22, 2023Updated 2 years ago
- MCP server for analyzing PE, ELF, and Mach-O binaries using LIEF☆26Mar 6, 2026Updated 8 months ago
- Guard Duty Threat Feed: Automatically keeps FIRE_EYE feeds updated☆17Aug 17, 2018Updated 8 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Burp Enterprise Toolkit☆12Feb 25, 2022Updated 4 years ago
- A recon tool for GCP Service Account Keys that requires no permissions☆28Apr 14, 2025Updated last year
- External twitter feeder for AIL framework☆16Apr 16, 2023Updated 3 years ago
- Some of my rough notes for Docker threat detection☆51Aug 26, 2023Updated 3 years ago
- Decloak Linux stealth rootkits hiding data with this simple memory mapped IO investigation tool.☆29Sep 29, 2025Updated last year
- A curated list of awesome infosec resources.☆32May 31, 2015Updated 11 years ago
- The ultimate repository for remotely deploying Crowdstrike sensors quickly and discreetly on any other EDR platform.☆26Aug 12, 2025Updated last year
- Fully functional, from-scratch alternative to the Cobalt Strike Beacon (red teaming tool), offering transparency and flexibility for secu…☆10Mar 13, 2024Updated 2 years ago
- DFIR Timeline Analysis for macOS — SQLite-backed viewer for CSV, TSV, XLSX, EVTX, Plaso, $MFT, and $J files with AI Artifacts, AI Secret …☆392Sep 8, 2026Updated 2 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Tool to read EVTX files including SYSMON and convert to JSON, MISP Objects and Graph stream☆12Oct 29, 2020Updated 6 years ago
- Loads STIX-2 into Neo4j☆26Jul 11, 2020Updated 6 years ago
- Python web app for previewing data in a Chrome Profile Folder☆28Jul 1, 2024Updated 2 years ago
- This repository contains the research and components of our research into using Sigma for AWS Incident Response.☆38Jul 12, 2023Updated 3 years ago
- Threat Hunting & Incident Investigation with Osquery☆216Mar 30, 2022Updated 4 years ago
- Sample SecOps scripts and Utilities☆12Jun 19, 2024Updated 2 years ago
- ☆12Feb 21, 2024Updated 2 years ago
Are these results useful?