hossammosttafa

RpcInvestigator

Exploring RPC interfaces on Windows

Grafiki

Threat Hunting tool about Sysmon and graphs

SIGMA-detection-rules

Set of SIGMA rules (>320) mapped to MITRE ATT&CK tactic and techniques

GHOSTS

GHOSTS is a realistic user simulation framework for cyber simulation, training, and exercise

Loki

Loki - Simple IOC and Incident Response Scanner

EventLogMonitor

EventLogMonitor hooks into Window Event Logs and display the new event as they written to the log.

Rhaegal

Rhaegal is a tool written in Python 3 used to scan Windows Event Logs for suspicious logs. Rhaegal uses custom rule format to detect suspicious/malicious logs

SDSParser-py

NTFS Security Descriptor Stream ($Secure:$SDS) parser, Python bindings for https://github.com/AbdulRhmanAlfaifi/SDSParser-rs

DFIR-Tools

This is the One Stop place where you can find almost all of your Tools of Requirements in DFIR

Sudomy

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

subzero

Passive subdomain enumeration tool for bug-bounty hunters & penetration testers.

subtracker

Gain the edge in hidden subdomain discovery with Subtracker.

AIL-framework

AIL framework - Analysis Information Leak framework

IntelOwl

IntelOwl: manage your Threat Intelligence at scale

cybersecurity-threat-intelligence

An ongoing & curated collection of awesome software best practices and remediation techniques, libraries and frameworks, E-books and videos, Technical guidelines and important resources about Threat Intelligence.

CTI-Toolbox

Cyber Threat Intelligence - Toolbox

Cybercrime-Forums

Cybercrime forums for Cyber Threat Intelligence purpose

cyber_threat_intelligence

Cyber Threat Intelligence Data, Indicators, and Analysis

Open-source-tools-for-CTI

Public Repository of Open Source Tools for Cyber Threat Intelligence Analysts and Researchers

ctifeeds

Cyber Threat Intelligence Feeds

deepdarkCTI

Collection of Cyber Threat Intelligence sources from the deep and dark web

cti

Cyber Threat Intelligence Repository expressed in STIX 2.0

opencti

Open Cyber Threat Intelligence Platform

ctia.github.io

project page for CTIA

CTIA-Module-04-Data-Collection-and-Processing-TBD

se-ai-hackathon

AI CTIA fun

ctia-ui

A web-based interface to a Cisco Threat Intel API instance

CTIA

Cyber Threat Intelligence Appliance

ctia

Cisco Threat Intelligence API

Microsoft-Cybersecurity-Pro-Track-Threat-Detection

Microsoft Cybersecurity Pro Track: Threat Detection, by EC-Council