Threat intelligence and threat detection indicators (IOC, IOA)
☆52Nov 27, 2020Updated 5 years ago
Alternatives and similar repositories for detections
Users that are interested in detections are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆22Dec 22, 2020Updated 5 years ago
- Synapse Rapid Power-up for SinkDB☆11Jun 24, 2025Updated last year
- The repository contains IOCs in CSV format for APT, Cyber Crimes, Malware and Trojan and whatever I found as part of hunting and research☆12Jun 10, 2017Updated 9 years ago
- ☆21Aug 27, 2026Updated 2 months ago
- Web Application for domain name monitoring / alerting☆66Aug 1, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Random hunting ordiented yara rules☆98Mar 27, 2023Updated 3 years ago
- VTC - Velociraptor Timeline Creator☆20May 15, 2024Updated 2 years ago
- Collection of malware ioc hashes from blog posts. A Python script is provided to search through it.☆19Sep 10, 2020Updated 6 years ago
- Forensic Artifact Collection Tool Matrix☆98Nov 9, 2024Updated last year
- CIRCL system forensic tools or a jumble of tools to support forensic☆41Jan 20, 2023Updated 3 years ago
- 威胁检测规则集☆15Jul 5, 2019Updated 7 years ago
- Threat Detection Rules (Snort/Sigma/Yara)☆14Jan 23, 2024Updated 2 years ago
- RisingSun: Decoding SUNBURST C2 to identify infected hosts without network telemetry.☆12Jan 14, 2021Updated 5 years ago
- IOCPARSER.COM is a Fast and Reliable service that enables you to extract IOCs and intelligence from different data sources.☆36Jan 20, 2022Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Repository of tools, YARA rules, and code-snippets from Stairwell's research team.☆24Jan 31, 2024Updated 2 years ago
- Cyber Threats Detection Rules☆14Sep 16, 2025Updated last year
- gundog - guided hunting in Microsoft Defender☆53Apr 29, 2021Updated 5 years ago
- Winterfell is a group of windows batch scripts to collect Windows forensics data and perform efficient, and fast incident response and th…☆52Jul 23, 2020Updated 6 years ago
- Detection Ideas & Rules repository.☆179Sep 10, 2021Updated 5 years ago
- Code for BH21 talk: "Generating YARA Rules by Classifying Malicious Byte Sequences"☆17Feb 6, 2025Updated last year
- Repository of YARA rules made by Trellix ATR Team☆631Mar 18, 2025Updated last year
- Export disassemblies into Protocol Buffers☆21Sep 11, 2026Updated last month
- A PHP script to run on your server to grab cookies through xss☆23Mar 25, 2019Updated 7 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- This directory contains random scripts from threat hunting or malware research☆11Feb 15, 2018Updated 8 years ago
- coreSigma is a macOS ESF & UL telemetry pipeline, detection, and threat hunting app for security analysis, using Sigma and Sigma backend …☆18Jan 29, 2026Updated 9 months ago
- THOR Thunderstorm Collectors☆31Updated this week
- Validates yara rules and tries to repair the broken ones.☆42Sep 5, 2020Updated 6 years ago
- ☆21Apr 19, 2024Updated 2 years ago
- CLI tools using Harpoon features☆24Nov 7, 2023Updated 2 years ago
- Blueteam operational triage registry hunting/forensic tool.☆147Sep 2, 2025Updated last year
- Scripts and code referenced in CrowdStrike blog posts☆341Nov 13, 2019Updated 6 years ago
- Scripts to aid intrusion and malware detection using the Jamf Agent and Jamf Server☆10May 4, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A Modular MWDB Utility to Collect Fresh Malware Samples☆33May 17, 2021Updated 5 years ago
- ☆12Dec 23, 2021Updated 4 years ago
- Indicator of Compromise Scanner for CVE-2019-19781☆59Mar 25, 2020Updated 6 years ago
- ☆152Jun 5, 2024Updated 2 years ago
- The Multiplatform Linux Sandbox☆16Dec 19, 2023Updated 2 years ago
- Pushes Sysmon Configs☆91Jun 11, 2021Updated 5 years ago
- Collection of generic YARA rules☆16Mar 18, 2026Updated 7 months ago