hunting

There are 24 repositories under hunting topic.

hacklcx / HFish
安全、可靠、简单、免费的企业级蜜罐
honeypot hunting
4035
OTRF / ThreatHunter-Playbook
A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
dfir hunter hunting hunting-campaigns hypothesis mitre mitre-attack-db sysmon threat-hunting
Language:Python 3958
Cyb3rWard0g / HELK
The Hunting ELK
docker dockerhub elastic elasticsearch elk elk-stack hunting hunting-platforms jupyter-notebook kibana logstash spark threat-hunting
Language:Jupyter Notebook 3738
Security-Onion-Solutions / security-onion
Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management
intrusion-detection network-security-monitoring log-management ids nsm hunting dfir
3058
Yamato-Security / hayabusa
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
attack cybersecurity detection dfir event forensics hayabusa hunting incident incident-response logs response rust security security-automation sigma threat threat-hunting windows yamato
Language:Rust 2138
microsoft / Microsoft-365-Defender-Hunting-Queries
Sample queries for Advanced hunting in Microsoft 365 Defender
cybersecurity hunting sample-code
Language:Jupyter Notebook 1901
Yamato-Security / WELA
WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）
dfir log analysis forensics incident response sigma windows event logs threat hunting timeline
Language:PowerShell 745
FalconForceTeam / FalconFriday
Hunting queries and detections
blueteam defender-atp defender-for-endpoint hunting kql purpleteam sentinel
703
DefensiveOrigins / AtomicPurpleTeam
Atomic Purple Team Framework and Lifecycle
attack attack-defense attack-detection famework hunting lifecycle lifecycle-management purpleteam
278
eshlomo1 / Microsoft-Sentinel-SecOps
Microsoft Sentinel SOC Operations
azure azure-sentinel cloudsecurity hunting incident-response ir microsoft microsoft-sentinel secops security siem soc threat-hunting threat-intelligence
Language:PowerShell 236
rastrea2r / rastrea2r
Collecting & Hunting for IOCs with gusto and style
threat hunting ioc security-tools
Language:Python 235
jurelou / epagneul
Graph Visualization for windows event logs
security security-tools forensics forensics-tools threat-hunting hunting evtx blueteam dfir-automation
Language:Python 228
wortell / KQL
KQL queries for Advanced Hunting
kql security hunting
165
Pyromid
Pymmdrza / Pyromid
Pyromid For Hack and Cracking Private Key and Address Bitcoin Wallet From Mnemonic [Words - Passphrase]
bitcoin crack hunting key mnemonic mnemonic-generator mnemonic-phrase private wallet bitcoinprivatekey pyromid
Language:Python 113
Pro2WordBTC
Pymmdrza / Pro2WordBTC
Bitcoin Crack and Hunting Private Key With Mnemonic [HACK] Passphrase 12-24 words and check value of address (transaction & balance)
bitcoin bitcoin-wallet btc crack hunting mining mnemonic privatekey hackbitcoin
Language:Python 106
lawndoc / AdvancedHuntingQueries
Microsoft 365 Advanced Hunting Queries with hotlinks that plug the query right into your tenant
cyber-security cybersecurity defender defender-atp defender-for-endpoint detection detection-engineering hunting kql kusto microsoft microsoft365 security threat-hunting xdr
102
alexverboon / Hunting-Queries-Detection-Rules
KQL Queries. Microsoft Defender, Microsoft Sentinel
detection kql security sentinel dfir hunting defenderforendpoint defenderforidentity azure azuread defenderxdr entraid
93
al0ne / MacCheck
一个Mac下信息搜集小脚本主要用于信息搜集/应急响应/检测挖矿进程/异常进程/异常启动项
hunting macos shell shell-script
Language:Shell 74
ThreatHunting-Keywords-yara-rules
mthcht / ThreatHunting-Keywords-yara-rules
yara detection rules for hunting with the threathunting-keywords project
awesome-list blueteam detection-engineering dfir forensics-tools hacktools hunting incident-response offensive-security threat-hunting threat-intelligence yara-forensics yara-rules yara-scanner yara-signatures
Language:YARA 73
MultiCryptoFinderRich
Pymmdrza / MultiCryptoFinderRich
Multi Batch Private Key Genereted and Check from Database
bitcoin ethereum private-key privatekeygenerator python btc crack dash dogecoin eth hunting tron trx burteforce
Language:Python 49
emrekybs / Douglas-042
Powershell script to help Speed up Threat hunting incident response processes
forensic-analysis forensics incident-response powershell threat-hunting threat-intelligence hunting
Language:PowerShell 45
svch0stz / TheThreatHuntLibrary
Library of threat hunts to get any user started!
hunting mitre hypothesis threat-hunting threathunting cybersecurity
Language:Python 40
trellix-enterprise / RTS-Queries
Practical Orientation Of MVISION EDR Query Language
mvision-edr mvision rts real-time-search edr hunting collectors soc blue-team
34
Yara-Rules / r2yara
r2yara - Module for Yara using radare2 information
hunting malware r2 radare2 yara
Language:C 33
eremit4 / Akamaru
Sniffing out well-known threat groups
apt-groups cti hunting mitre-attack mitre-attack-db python ransomlook ransomware-resources sentinelone threat-hunting threat-intelligence threathunting threatintel
Language:Python 28
ceramicskate0 / SWELF
Simple Windows Event Log Forwarder (SWELF). Its easy to use/simply works Log Forwarder and EVTX Parser. Almost in full release here at https://github.com/ceramicskate0/SWELF/releases/latest.
windows eventlog forwarder logging dotnet logs defense logging-agent log-forwarder hunting cybersecurity siem powershell detection windowsevents analytics analysis evtx logging-framework sysmon
Language:C# 24
tomwechsler / Threat_Hunting_with_PowerShell
Security even with a small budget - there is no excuse!
hunting microsoft powershell
Language:PowerShell 16
alyrezo / FindBBP
Bug Bounty Program Discovery tool, that discovers bug Bounty Program via security.txt file by default and you can use custom dork
bug bug-bounty bug-hunting bugbounty bugbounty-tool hack hacker hunting
Language:Python 15
joeavanzato / crackdown
Helping Incident Responders hunt for potential persistence mechanisms on UNIX-based systems.
blueteam dfir forensics golang hunting incident-response persistence
Language:Go 15
corelight / Dashboards-Splunk-DNS-Hunting-Beaconing
DNS Dashboard for hunting and identifying beaconing
dns-dashboard hunting
14
0x802 / LinkSniper
Spider or repeater to find all links.
spiders crawl repeater links urls scan hacktools bugbounty hunting subdomain subdomain-scanner
Language:Python 13
BlueSpace2021
ch33r10 / BlueSpace2021
Ekoparty's BlueSpace Keynote November 2021. Shoutout to @plugxor Muchas Gracias!!!
threat-hunting threat-intelligence threat-intel hunting cti hunt cyber-threat-intelligence cyber-threat-hunting
13
bobbystacksmash / CMD-DeObfuscator
A Node.js module for deobfuscating and expanding DOS/BATCH commands.
malware-analysis malware incident-response hunting batch
Language:JavaScript 12
MixHunter
Pymmdrza / MixHunter
MixHunter for crack hack hunting private key ethereum litecoin dash dogecoin
crack dash dogecoin ethereum hack hunting key litecoin private privatekey tools mixhunter
11
BoosterHunt
Pymmdrza / BoosterHunt
Booster Hunting a Powerfull script For Hunting Private Key With CPU Saver MOD
booster bitcoin bitcoinaddress btc check cpu crack cracking hunt hunting line-to-line privatekey python readline wallet
Language:Python 10
nkleck / gitrax
Github username search
github username github-api email hunting
Language:Python 8

hunting

hacklcx / HFish

OTRF / ThreatHunter-Playbook

Cyb3rWard0g / HELK

Security-Onion-Solutions / security-onion

Yamato-Security / hayabusa

microsoft / Microsoft-365-Defender-Hunting-Queries

Yamato-Security / WELA

FalconForceTeam / FalconFriday

DefensiveOrigins / AtomicPurpleTeam

eshlomo1 / Microsoft-Sentinel-SecOps

rastrea2r / rastrea2r

jurelou / epagneul

wortell / KQL

Pymmdrza / Pyromid

Pymmdrza / Pro2WordBTC

lawndoc / AdvancedHuntingQueries

alexverboon / Hunting-Queries-Detection-Rules

al0ne / MacCheck

mthcht / ThreatHunting-Keywords-yara-rules

Pymmdrza / MultiCryptoFinderRich

emrekybs / Douglas-042

svch0stz / TheThreatHuntLibrary

trellix-enterprise / RTS-Queries

Yara-Rules / r2yara

eremit4 / Akamaru

ceramicskate0 / SWELF

tomwechsler / Threat_Hunting_with_PowerShell

alyrezo / FindBBP

joeavanzato / crackdown

corelight / Dashboards-Splunk-DNS-Hunting-Beaconing

0x802 / LinkSniper

ch33r10 / BlueSpace2021

bobbystacksmash / CMD-DeObfuscator

Pymmdrza / MixHunter

Pymmdrza / BoosterHunt

nkleck / gitrax