A threat hunting process
☆152Nov 4, 2026Updated this week
Alternatives and similar repositories for UnifiedThreatHunting
Users that are interested in UnifiedThreatHunting are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A agentic Intel to hunt pipeline. Get hunting faster☆16Oct 19, 2026Updated 2 weeks ago
- Adversarial Detection Engineering knowledge base — ADE taxonomy, worked technique files, platform bug patterns, mitigations, and purple-t…☆88Sep 30, 2026Updated last month
- Detection engineering with durable memory, a five-stage lifecycle, and an agentic surface — the sibling of ATHF.☆37Oct 14, 2026Updated 3 weeks ago
- EntraTrace is a defensive security research tool for tracking and identifying the behavior of offensive tooling targeting Microsoft Entra…☆122Updated this week
- Open test set of .eml emails for checking how email security controls and AI mailbox assistants handle indirect prompt injection. It cros…☆22Oct 31, 2026Updated last week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A canvas for red team infrastructure and cyber ranges. Compose a topology, export runnable Terraform and Ansible, and deploy it yourself.…☆171Updated this week
- Self-hosted multi-engine Sigma detection for event logs☆43Updated this week
- Open, practitioner-maintained Detection Engineering curriculum.☆23Updated this week
- Assess, convert and deploy Microsoft Sentinel analytics rules as Defender XDR custom detections☆16Sep 29, 2026Updated last month
- Prevention-focused living-off-the-land testing framework mapped to MITRE ATT&CK.☆30Jul 24, 2026Updated 3 months ago
- ☆93Sep 25, 2026Updated last month
- Microsoft Sentinel SIEM Log Source Analyzer☆31Oct 27, 2026Updated last week
- Threat Hunting queries of multiple platforms☆86Updated this week
- Automated adversary emulation (Caldera) against an AD lab to validate Sigma detection coverage and map results to MITRE ATT&CK.☆59Sep 25, 2026Updated last month
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Open-source memory forensics platform for DFIR, threat hunting, malware analysis, and incident response.☆31Oct 5, 2026Updated last month
- A CTI program management and production platform built around MISP☆51Updated this week
- A framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concret…☆67Oct 29, 2026Updated last week
- Repository where I hold random detection and threat hunting queries that I come up with based on different sources of information (or eve…☆294Jun 23, 2026Updated 4 months ago
- ☆22Jul 13, 2026Updated 3 months ago
- Cyber Threat Intelligence☆83Dec 7, 2025Updated 11 months ago
- how to strangle threats☆70Updated this week
- A curated collection of DFIR skills and workflows for InfoSec practitioners.☆325May 14, 2026Updated 5 months ago
- ☆28Oct 22, 2026Updated 2 weeks ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ATHF is a framework for agentic threat hunting - building systems that can remember, learn, and act with increasing autonomy.☆409Oct 22, 2026Updated 2 weeks ago
- Community-driven PowerShell detection indicators☆47Jan 27, 2026Updated 9 months ago
- PowerShell tools to help defenders hunt smarter, hunt harder.☆491Oct 29, 2025Updated last year
- Generate realistic synthetic security logs for cybersecurity threat hunting training and research☆297Updated this week
- DFIR Timeline Analysis for macOS — SQLite-backed viewer for CSV, TSV, XLSX, EVTX, Plaso, $MFT, and $J files with AI Artifacts, AI Secret …☆390Sep 8, 2026Updated last month
- Always-on, cross-platform telemetry daemon for AI agent activity. Sysmon for AI agents.☆63Jul 28, 2026Updated 3 months ago
- CrowdStrike Falcon Advanced Threat Hunting Queries☆14Aug 19, 2026Updated 2 months ago
- A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters …☆359Updated this week
- Manage and maintain Defender XDR custom collection configuration☆42Nov 19, 2025Updated 11 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A PoC of User-Defined Reflective Loader for Havoc Framework built with Cystal Palace☆49Oct 18, 2026Updated 2 weeks ago
- A sysmon configuration designed for monitoring RMM solutions from the LOLRMM framework on the OS Microsoft Windows. 10/11☆37Feb 17, 2026Updated 8 months ago
- KustoHawk is a lightweight incident triage and response tool designed for effective incident response in Microsoft Defender XDR and Micro…☆161Apr 1, 2026Updated 7 months ago
- Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.☆237Oct 27, 2026Updated last week
- ☆13Sep 13, 2026Updated last month
- Production-ready KQL queries for Microsoft Defender XDR and Microsoft Sentinel. Focused on Threat Hunting, Detection Engineering, and MIT…☆186Oct 22, 2026Updated 2 weeks ago
- ☆24Sep 12, 2026Updated last month