hunting

There are 25 repositories under hunting topic.

hacklcx / HFish
安全、可靠、简单、免费的企业级蜜罐
honeypot hunting
3878
OTRF / ThreatHunter-Playbook
A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
threat-hunting sysmon hunting-campaigns hypothesis hunting dfir hunter mitre-attack-db mitre
Language:Python 3860
Cyb3rWard0g / HELK
The Hunting ELK
hunting elasticsearch kibana logstash hunting-platforms elk elk-stack elastic docker jupyter-notebook threat-hunting spark dockerhub
Language:Jupyter Notebook 3692
Security-Onion-Solutions / security-onion
Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management
intrusion-detection network-security-monitoring log-management ids nsm hunting dfir
3057
Yamato-Security / hayabusa
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
dfir threat hunting windows event logs rust sigma detection attack forensics incident response hayabusa yamato security cybersecurity incident-response security-automation threat-hunting
Language:Rust 1920
microsoft / Microsoft-365-Defender-Hunting-Queries
Sample queries for Advanced hunting in Microsoft 365 Defender
hunting cybersecurity sample-code
Language:Jupyter Notebook 1847
Yamato-Security / WELA
WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）
dfir log analysis forensics incident response sigma windows event logs threat hunting timeline
Language:PowerShell 675
FalconForceTeam / FalconFriday
Hunting queries and detections
kql blueteam hunting purpleteam sentinel defender-atp defender-for-endpoint
651
DefensiveOrigins / AtomicPurpleTeam
Atomic Purple Team Framework and Lifecycle
purpleteam hunting attack attack-defense attack-detection lifecycle-management lifecycle famework
269
rastrea2r / rastrea2r
Collecting & Hunting for IOCs with gusto and style
threat hunting ioc security-tools
Language:Python 233
eshlomo1 / Microsoft-Sentinel-SecOps
Microsoft Sentinel SOC Operations
azure-sentinel security secops siem soc azure hunting ir incident-response microsoft microsoft-sentinel threat-hunting threat-intelligence cloudsecurity
Language:PowerShell 228
jurelou / epagneul
Graph Visualization for windows event logs
security security-tools forensics forensics-tools threat-hunting hunting evtx blueteam dfir-automation
Language:Python 221
wortell / KQL
KQL queries for Advanced Hunting
kql security hunting
165
Pro2WordBTC
Pymmdrza / Pro2WordBTC
Bitcoin Crack and Hunting Private Key With Mnemonic [HACK] Passphrase 12-24 words and check value of address (transaction & balance)
bitcoin bitcoin-wallet btc crack hunting mining mnemonic privatekey hackbitcoin
Language:Python 94
lawndoc / AdvancedHuntingQueries
Microsoft 365 Advanced Hunting Queries with hotlinks that plug the query right into your tenant
security cybersecurity kusto kql hunting threat-hunting detection detection-engineering microsoft microsoft365 defender-for-endpoint defender defender-atp cyber-security xdr
93
Pyromid
Pymmdrza / Pyromid
Pyromid For Hack and Cracking Private Key and Address Bitcoin Wallet From Mnemonic [Words - Passphrase]
bitcoin crack hunting key mnemonic mnemonic-generator mnemonic-phrase private wallet bitcoinprivatekey pyromid
Language:Python 93
al0ne / MacCheck
一个Mac下信息搜集小脚本主要用于信息搜集/应急响应/检测挖矿进程/异常进程/异常启动项
macos shell shell-script hunting
Language:Shell 73
alexverboon / Hunting-Queries-Detection-Rules
KQL Queries. Microsoft 365 Defender, Microsoft Sentinel
detection kql security sentinel defender365 dfir hunting defenderforendpoint defenderforidentity azure azuread
65
MultiCryptoFinderRich
Pymmdrza / MultiCryptoFinderRich
Multi Batch Private Key Genereted and Check from Database
bitcoin ethereum private-key privatekeygenerator python btc crack dash dogecoin eth hunting tron trx burteforce
Language:Python 46
ThreatHunting-Keywords-yara-rules
mthcht / ThreatHunting-Keywords-yara-rules
yara detection rules for hunting with the threathunting-keywords project
awesome-list blueteam detection-engineering dfir forensics-tools hacktools hunting incident-response offensive-security threat-hunting threat-intelligence yara-forensics yara-rules yara-scanner yara-signatures
Language:YARA 43
emrekybs / Douglas-042
Powershell script to help Speed up Threat hunting incident response processes
forensic-analysis forensics incident-response powershell threat-hunting threat-intelligence hunting
Language:PowerShell 41
trellix-enterprise / RTS-Queries
Practical Orientation Of MVISION EDR Query Language
mvision-edr mvision rts real-time-search edr hunting collectors soc blue-team
34
Yara-Rules / r2yara
r2yara - Module for Yara using radare2 information
yara radare2 r2 hunting malware
Language:C 33
svch0stz / TheThreatHuntLibrary
Library of threat hunts to get any user started!
hunting mitre hypothesis threat-hunting threathunting cybersecurity
Language:Python 32
eremit4 / Akamaru
Sniffing out well-known threat groups
apt-groups cti python ransomware-resources threat-hunting threat-intelligence hunting mitre-attack sentinelone threathunting threatintel mitre-attack-db ransomlook
Language:Python 27
ceramicskate0 / SWELF
Simple Windows Event Log Forwarder (SWELF). Its easy to use/simply works Log Forwarder and EVTX Parser. Almost in full release here at https://github.com/ceramicskate0/SWELF/releases/latest.
windows eventlog forwarder logging dotnet logs defense logging-agent log-forwarder hunting cybersecurity siem powershell detection windowsevents analytics analysis evtx logging-framework sysmon
Language:C# 23
alyrezo / FindBBP
Bug Bounty Program Discovery tool, that discovers bug Bounty Program via security.txt file by default and you can use custom dork
bug bug-bounty bug-hunting bugbounty bugbounty-tool hack hacker hunting
Language:Python 16
tomwechsler / Threat_Hunting_with_PowerShell
Security even with a small budget - there is no excuse!
hunting microsoft powershell
Language:PowerShell 16
corelight / Dashboards-Splunk-DNS-Hunting-Beaconing
DNS Dashboard for hunting and identifying beaconing
dns-dashboard hunting
14
0x802 / LinkSniper
Spider or repeater to find all links.
spiders crawl repeater links urls scan hacktools bugbounty hunting subdomain subdomain-scanner
Language:Python 13
BlueSpace2021
ch33r10 / BlueSpace2021
Ekoparty's BlueSpace Keynote November 2021. Shoutout to @plugxor Muchas Gracias!!!
threat-hunting threat-intelligence threat-intel hunting cti hunt cyber-threat-intelligence cyber-threat-hunting
13
joeavanzato / crackdown
Helping Incident Responders hunt for potential persistence mechanisms on UNIX-based systems.
blueteam dfir forensics golang hunting incident-response persistence
Language:Go 12
BoosterHunt
Pymmdrza / BoosterHunt
Booster Hunting a Powerfull script For Hunting Private Key With CPU Saver MOD
booster bitcoin bitcoinaddress btc check cpu crack cracking hunt hunting line-to-line privatekey python readline wallet
Language:Python 12
MixHunter
Pymmdrza / MixHunter
MixHunter for crack hack hunting private key ethereum litecoin dash dogecoin
crack dash dogecoin ethereum hack hunting key litecoin private privatekey tools mixhunter
12
bobbystacksmash / CMD-DeObfuscator
A Node.js module for deobfuscating and expanding DOS/BATCH commands.
malware-analysis malware incident-response hunting batch
Language:JavaScript 11
nkleck / gitrax
Github username search
github username github-api email hunting
Language:Python 8

hunting

hacklcx / HFish

OTRF / ThreatHunter-Playbook

Cyb3rWard0g / HELK

Security-Onion-Solutions / security-onion

Yamato-Security / hayabusa

microsoft / Microsoft-365-Defender-Hunting-Queries

Yamato-Security / WELA

FalconForceTeam / FalconFriday

DefensiveOrigins / AtomicPurpleTeam

rastrea2r / rastrea2r

eshlomo1 / Microsoft-Sentinel-SecOps

jurelou / epagneul

wortell / KQL

Pymmdrza / Pro2WordBTC

lawndoc / AdvancedHuntingQueries

Pymmdrza / Pyromid

al0ne / MacCheck

alexverboon / Hunting-Queries-Detection-Rules

Pymmdrza / MultiCryptoFinderRich

mthcht / ThreatHunting-Keywords-yara-rules

emrekybs / Douglas-042

trellix-enterprise / RTS-Queries

Yara-Rules / r2yara

svch0stz / TheThreatHuntLibrary

eremit4 / Akamaru

ceramicskate0 / SWELF

alyrezo / FindBBP

tomwechsler / Threat_Hunting_with_PowerShell

corelight / Dashboards-Splunk-DNS-Hunting-Beaconing

0x802 / LinkSniper

ch33r10 / BlueSpace2021

joeavanzato / crackdown

Pymmdrza / BoosterHunt

Pymmdrza / MixHunter

bobbystacksmash / CMD-DeObfuscator

nkleck / gitrax