An AI agent skill that can be used to create queries in the CrowdStrike Query Language.
☆16Apr 14, 2026Updated 6 months ago
Alternatives and similar repositories for cql-best-practices
Users that are interested in cql-best-practices are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Best Practices, queries, and packages for CQL the language of CrowdStrike's LogScale (Humio) log manager.☆15May 7, 2026Updated 6 months ago
- CrowdStrike Falcon Advanced Threat Hunting Queries☆14Aug 19, 2026Updated 2 months ago
- Setup and authentication skills for CrowdStrike MCP: streamlined connection configuration, OAuth 2.0 token management, and secure access …☆14Aug 27, 2026Updated 2 months ago
- ☆14Sep 2, 2026Updated 2 months ago
- Infrastructure as code for CrowdStrike — manage detections, saved searches, lookup files, and more with a Terraform-like lifecycle.☆26Oct 27, 2026Updated last week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A collection of Claude Code skills that help security teams stay secure☆57Apr 27, 2026Updated 6 months ago
- A collection of CQL hunting leads for CrowdStrike Falcon and LogScale, mapped to the MITRE ATT&CK framework.☆35Sep 8, 2026Updated last month
- Automate forensic traige package collection and evidence parsing with KAPE and Crowdstrike☆15Mar 5, 2022Updated 4 years ago
- AI coding assistant skills for building CrowdStrike Falcon Fusion workflows: action discovery, YAML authoring, deployment, execution moni…☆29Updated this week
- CQL Hub is an open repository of detection and hunting queries for CrowdStrike NextGen SIEM and Falcon LogScale. All queries stored here …☆86Oct 28, 2026Updated last week
- Bulk-run Hayabusa across a folder of triage collections, one run per host, with per-host reports and a cross-host triage dashboard☆20Updated this week
- This project automates the creation of a complete security lab environment for detection engineering and attack simulation.☆14Aug 8, 2025Updated last year
- A curated reference of threat detection engineering & incident response frameworks, tools, and detection rule sources.☆13Jun 30, 2026Updated 4 months ago
- Valkyrie Framework is an open source suite of tools that enable hunt teams to locate and identify hidden cybersecurity threats lurking in…☆12Sep 24, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆11Dec 25, 2025Updated 10 months ago
- ☆13Sep 13, 2026Updated last month
- A dockerized version of the sof-elk project☆13Oct 24, 2026Updated 2 weeks ago
- Claude Code skills and plugins☆13Apr 17, 2026Updated 6 months ago
- A lightning-fast, lightweight DFIR triage and threat hunting engine for Windows Minidumps (.DMP).☆20Oct 2, 2026Updated last month
- Outil de triage automatisé de différents types de collectes d'artefacts.☆18Dec 8, 2025Updated 10 months ago
- A BOF for patching AMSI, ETW and NtTraceEvent aka Sysmon using Trampolines☆13Jul 30, 2026Updated 3 months ago
- Used HTTP CSIC 2010 dataset☆11May 2, 2019Updated 7 years ago
- Orchestration Software for Incident Response☆16Updated this week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Dataset used in WAF-A-MoLE paper☆10Jun 3, 2020Updated 6 years ago
- How to ARM Yourself - Bsides Tampa 2020☆14Mar 1, 2020Updated 6 years ago
- Logpresso Mini and community contents for incident response☆22Oct 21, 2021Updated 5 years ago
- A Synapse Rapid Power-Up that allows Synapse to interact with Assemblyline v4.☆10Apr 13, 2024Updated 2 years ago
- Tiny: a tiny programming language implemented in PowerShell☆15Jun 21, 2023Updated 3 years ago
- A practical DFIR cheatsheet for identifying, collecting, triaging, and reviewing macOS persistence mechanisms, with acquisition-aware gui…☆26Apr 26, 2026Updated 6 months ago
- Crowdstrike Falcon Host script for iterating through instances to get alert and other relevant data☆14Jul 16, 2019Updated 7 years ago
- Atlassian confluence unauthenticated ONGL injection remote code execution scanner (CVE-2022-26134).☆13Jan 22, 2025Updated last year
- A GUI for packet captures in Windows using pktmon☆12Apr 17, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Web Applicaiton Firewall Implementation using Deep Learning☆16Feb 3, 2023Updated 3 years ago
- Group imports from Windows binaries☆17Oct 7, 2021Updated 5 years ago
- Valhuntir CLI — AI-augmented incident response platform☆149Updated this week
- The latest pyWars client for the SEC573 class☆49Jun 25, 2026Updated 4 months ago
- Terraform project to build AWS instances for pivot practice☆12May 15, 2023Updated 3 years ago
- Utility for ClickOnce usage for Red Teams.☆15Jun 11, 2026Updated 4 months ago
- Connect AI agents to CrowdStrike Falcon for automated security analysis and threat hunting☆277Updated this week