The self-hosted KQL query management platform for SOC teams
☆23May 20, 2026Updated 5 months ago
Alternatives and similar repositories for KQLab
Users that are interested in KQLab are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Secrets scanner with a twist... this is for getting threat actor credentials from MALWARE. Acquire TA creds from FLOSS exports, memdumps…☆43Aug 9, 2026Updated 3 months ago
- ⚡ Rust-accelerated temporal graph engine for cybersecurity threat hunting. Ingests 100M+ edges from PCAP/CSV on a single machine. Sub-sec…☆15Jul 30, 2026Updated 3 months ago
- Local-first permission gateway for AI agents with scoped connector access, human approval, audit trails, and encrypted local credentials.☆19Updated this week
- Sigma detection rules for AI agent security monitoring☆16Jul 28, 2026Updated 3 months ago
- An OpenAI API Compatible Honeypot Gateway☆28Mar 17, 2025Updated last year
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- A monthly Windows PE baseline dataset for Cyber security researchers☆24Oct 30, 2026Updated last week
- Bounded local runtime and policy boundary for coding agents☆22Updated this week
- ☆20Oct 19, 2026Updated 2 weeks ago
- ☆67Updated this week
- Official, curated detection content (Sigma, YARA, IOC packs) for the Rustinel endpoint detection engine.☆28Updated this week
- Visualize Microsoft Defender XDR process trees and security events☆33Aug 24, 2025Updated last year
- Detection engineering template☆15Jul 24, 2025Updated last year
- Always-on, cross-platform telemetry daemon for AI agent activity. Sysmon for AI agents.☆63Jul 28, 2026Updated 3 months ago
- ☆17Aug 27, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Kassandra is a custom Mythic C2 agent written in Rust, containerized via a Python-based builder☆25Jul 31, 2026Updated 3 months ago
- Open-source, self-hosted security pipeline for IT, AI and OT. Logs in. Evidence out.: OCSF normalization, 46 detection rules (MITRE/ATLAS…☆20Updated this week
- A cross platform tool to work with keytab files used by Kerberos to store authentication information.☆13Oct 9, 2026Updated last month
- Threat Hunting queries of multiple platforms☆86Updated this week
- MCP to help Defenders Detection Engineer Harder and Smarter☆522Updated this week
- A harmless Netcat-lookalike for detection testing. Simulates NC-style command-line flags and listener behavior without exposing a real ba…☆37Nov 27, 2025Updated 11 months ago
- Local forensic scanner that extracts credentials from AI tool conversation history. For authorized red team and DLP use only.☆66Updated this week
- Windows EVTX log analysis for DFIR — fast parsing, ATT&CK mapping, IOC extraction, and Sentinel anomaly detection. Normal + Juggernaut Mo…☆61Updated this week
- Open-source, offline forensic scanner CLI tool designed to detect evidence of git repo collection or upload by the Grok Build CLI to xAI …☆19Jul 21, 2026Updated 3 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A Fast, Modular, and Scalable TLS/SSL Security Scanner Written in Rust☆39Nov 2, 2026Updated last week
- Cross-platform incident response toolkit. 28 pre-built use cases in a single zero-install binary: triage, threat hunting, memory forensic…☆162Jul 28, 2026Updated 3 months ago
- tool to extract LSA credentials using a vulnerable microsoft signed windows defender driver in a stealthy manner☆19Apr 12, 2026Updated 6 months ago
- Perform file-based malware scan on your on-prem servers with AWS☆14Oct 31, 2023Updated 3 years ago
- Offensive Security Certified Professional☆13Aug 20, 2024Updated 2 years ago
- A script to create and assign SOP tasks into the cases☆20Aug 16, 2020Updated 6 years ago
- The entire knowledge around the detection lifecycle, encoded into skills. More details at https://detectionskills.io/☆57Oct 14, 2026Updated 3 weeks ago
- Caeruleus is a Bluetooth Low Energy testing toolkit for Linux/BlueZ, implemented as a single Go binary. It covers the full interaction-to…☆60Sep 29, 2026Updated last month
- One PsExec client to rule them all☆16Mar 25, 2026Updated 7 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A command-line tool to mount SMB shares and scan them for secrets using NoseyParker.☆37Updated this week
- Scrapes Audit Logs From Cloudflare and Streams to Std Out☆11May 6, 2025Updated last year
- Free, self-hosted alternative to Burp Suite Pro — MITM proxy + full active scanner (SQLi/XSS/SSRF/XXE/SSTI/smuggling), recon→CVE, OAST, n…☆41Sep 30, 2026Updated last month
- Information about most important hunts which can be performed by Threat hunters while searching for any adversary/threats inside the orga…☆15May 18, 2019Updated 7 years ago
- MLOps Attack Toolkit in Python☆16Feb 20, 2026Updated 8 months ago
- A Kubernetes Forensic Collection Framework for Azure Kubernetes Service☆44Feb 9, 2026Updated 8 months ago
- AI Deception Layer for - containing adversarial context designed to redirect or confuse an LLM agent reading your own infrastructure☆15Jun 23, 2026Updated 4 months ago