Threat Hunter's Knowledge Base
☆24Dec 27, 2021Updated 4 years ago
Alternatives and similar repositories for Threat-Hunters-KB
Users that are interested in Threat-Hunters-KB are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Detection Ideas & Rules repository.☆179Sep 10, 2021Updated 5 years ago
- Config files for my GitHub profile.☆11Aug 18, 2025Updated last year
- Random tips and tricks RE: ransomware☆14Aug 17, 2021Updated 5 years ago
- Repo for Automations and other solutions for Elastic SIEM/Security.☆19Jun 15, 2021Updated 5 years ago
- Cheat sheets for threat hunting, detection and other stuff.☆35Oct 7, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- List of custom developed KQL queries to help proactive security teams hunt for opportunistic and sophisticated threat activity by develop…☆27Jun 30, 2021Updated 5 years ago
- Old home of LimaCharlie, open source EDR☆32Aug 2, 2026Updated 3 months ago
- This repository hosts community contributed Kestrel huntflows (.hf) and huntbooks (.ipynb)☆37Jan 2, 2024Updated 2 years ago
- Colection of different JUMPSEC advisories, guidance, and scripts for all of the latest vulnerabilities and adversaries☆13Oct 18, 2021Updated 5 years ago
- Sysmon Tools for PowerShell☆12Aug 17, 2018Updated 8 years ago
- ☆29Jul 19, 2026Updated 3 months ago
- Scripts useful for supporting customers☆12Jul 8, 2026Updated 3 months ago
- ☆11Jun 24, 2022Updated 4 years ago
- An exercise to practice deobfuscating PowerShell Scripts.☆26Feb 10, 2023Updated 3 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Library to parse Splunk-specific .conf files.☆14Oct 15, 2026Updated 3 weeks ago
- Automated Deployment of Lab Environments System (ADLES)☆31Mar 25, 2021Updated 5 years ago
- ☆74Jun 20, 2023Updated 3 years ago
- ssh user enumeration☆13Mar 21, 2023Updated 3 years ago
- Oriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The…☆174Jun 10, 2021Updated 5 years ago
- Cyber Threat Intelligence Appliance☆13Dec 8, 2022Updated 3 years ago
- This repo will contain all the codes and materials used in my computer science youtube channel https://www.youtube.com/channel/UC7J8myLv3…☆13Dec 24, 2023Updated 2 years ago
- Active Directory forensic framework☆11May 26, 2016Updated 10 years ago
- Splunk Searches and Dashboards for DNS Threat Hunting☆11Mar 5, 2018Updated 8 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Read Windows message table entries.☆11Feb 5, 2023Updated 3 years ago
- Validates username & password combination(s) across a host or group of hosts using the SMB protocol.☆15Apr 6, 2020Updated 6 years ago
- https://pinkdraconian.gitbook.io/methodology/☆14Aug 24, 2021Updated 5 years ago
- Client-side scripts provided by WhoisXML API, Inc., for clients using WHOIS data feeds to obtain bulk whois data or to set up a WHOIS da…☆19Jun 7, 2023Updated 3 years ago
- ☆10Mar 27, 2022Updated 4 years ago
- Splunk code (SPL) for serious threat hunters and detection engineers.☆294Jan 15, 2024Updated 2 years ago
- ☆43May 22, 2021Updated 5 years ago
- A honeypot that can be used to observe traffic directed at home routers.☆22Nov 14, 2018Updated 7 years ago
- A Splunk app that will rotate between dashboards on a frequency; useful for displaying content on informational big screens.☆13Mar 9, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Sigma rules to share with the community☆126Jan 29, 2025Updated last year
- A collection of Splunk dashboard templates.☆16Apr 18, 2019Updated 7 years ago
- YAFRA is a semi-automated framework for analyzing and representing reports about IT Security incidents.☆27Dec 14, 2021Updated 4 years ago
- Zero Trust Network Framework☆10Sep 29, 2019Updated 7 years ago
- An Intro to Penetration Testing Workshop☆15May 31, 2018Updated 8 years ago
- Threat Hunting & Incident Investigation with Osquery☆216Mar 30, 2022Updated 4 years ago
- Welcome to the NCC Group Threat Intelligence Alert repo, here you will find the alerts which we have raised to our customers regarding in…☆25Feb 6, 2023Updated 3 years ago