Jevline: start from one confirmed-malicious process; Jev links the rest of the incident into a timeline, execution chain and evidence table.
☆47Oct 15, 2026Updated 3 weeks ago
Alternatives and similar repositories for jevline
Users that are interested in jevline are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆17Aug 27, 2026Updated 2 months ago
- Velociraptor ai skills☆20Updated this week
- ☆21Sep 11, 2026Updated last month
- A DFIR Incident Response AI bot using local Ollama LLM to derrive automated findings from logs☆18Jan 17, 2026Updated 9 months ago
- Security capability evaluation of locally served models. Method, corpus, and per-model results.☆18Oct 19, 2026Updated 2 weeks ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Native sigma scanner for Linux logs☆17Updated this week
- ☆22Sep 28, 2026Updated last month
- A collection of PowerShell scripts designed to transform raw forensic data into formats suitable for analysis☆12Jan 18, 2026Updated 9 months ago
- Discover GPS location and private data exposure inside of images using this Burp & ZAP plugin.☆17Oct 22, 2026Updated 2 weeks ago
- Detection engineering with durable memory, a five-stage lifecycle, and an agentic surface — the sibling of ATHF.☆37Oct 14, 2026Updated 3 weeks ago
- A Compiler from Sigma rules to VQL☆21Oct 19, 2026Updated 2 weeks ago
- A curated collection of DFIR skills and workflows for InfoSec practitioners.☆325May 14, 2026Updated 5 months ago
- A vendor-neutral collection of Sigma, YARA, and Suricata rules for detecting compromise of LLM applications, MCP servers, ML supply chain…☆155Updated this week
- A monthly Windows PE baseline dataset for Cyber security researchers☆24Oct 30, 2026Updated last week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A 'code-mode' MCP server that allows LLMs to safely generate and execute JavaScript code that performs forensic analysis and employs trad…☆40Updated this week
- FakeOpenSmtpRelay.py is a Python3 script simulating a working open SMTP relay☆13Mar 18, 2019Updated 7 years ago
- coreSigma is a macOS ESF & UL telemetry pipeline, detection, and threat hunting app for security analysis, using Sigma and Sigma backend …☆19Jan 29, 2026Updated 9 months ago
- MCP server for incident response in AWS☆18Sep 2, 2025Updated last year
- A threat hunting process☆152Updated this week
- MCP to help Defenders Detection Engineer Harder and Smarter☆522Updated this week
- A tool to run and validate telemetry for Atomic Red Team tests☆17Mar 21, 2024Updated 2 years ago
- Open, practitioner-maintained Detection Engineering curriculum.☆23Updated this week
- This is the repo for the Identity Masterclass at ExpertsLive Netherlands 2026.☆25Jun 14, 2026Updated 4 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Attack techniques for threat emulation in VMware environments☆58Updated this week
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆17Jan 6, 2021Updated 5 years ago
- Automated adversary emulation (Caldera) against an AD lab to validate Sigma detection coverage and map results to MITRE ATT&CK.☆59Sep 25, 2026Updated last month
- VTC - Velociraptor Timeline Creator☆20May 15, 2024Updated 2 years ago
- Convert MISP events to Elastalert rules☆12Aug 10, 2021Updated 5 years ago
- Indicators of compromise☆19May 18, 2026Updated 5 months ago
- Official, curated detection content (Sigma, YARA, IOC packs) for the Rustinel endpoint detection engine.☆28Updated this week
- Carve file metadata from NTFS index ($I30) attributes☆76May 25, 2026Updated 5 months ago
- ☆107Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Prevention-focused living-off-the-land testing framework mapped to MITRE ATT&CK.☆30Jul 24, 2026Updated 3 months ago
- Thor Artifacts for Velociraptor☆19Dec 2, 2025Updated 11 months ago
- The LOLBins CTI-Driven (Living-Off-the-Land Binaries Cyber Threat Intelligence Driven) is a project that aims to help cyber defenders und…☆132Oct 20, 2026Updated 2 weeks ago
- NTFS file system specimens☆13May 21, 2026Updated 5 months ago
- Self-hosted multi-engine Sigma detection for event logs☆43Updated this week
- An experimental Velociraptor implementation using cloud infrastructure☆26Oct 28, 2026Updated last week
- A set of AWS resources for testing the Log4Shell vulnerability, deployable with terraform☆11Dec 20, 2021Updated 4 years ago