threat

There are 15 repositories under threat topic.

teler
teler-sh / teler
Real-time HTTP Intrusion Detection
analyze-logs go golang ids intrusion intrusion-detection intrusion-detection-system iocs log log-analyzer logs threat threat-analyzer threat-hunting threat-intelligence threat-rules
Language:Go 3064
Yamato-Security / hayabusa
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
dfir threat hunting windows event logs rust sigma detection attack forensics incident response hayabusa yamato security cybersecurity incident-response security-automation threat-hunting
Language:Rust 2828
activecm / rita-legacy
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
analysis analytics beacon beacon-sniffer bhis blueteam bro-ids dga dns dns-tunneling logs network-traffic offensive-countermeasures rita scanning security threat
Language:Go 2515
mandiant / ThreatPursuit-VM
Threat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and hunting designed for intel and malware analysts as well as threat hunters to get up and running quickly.
analytics cyber data-science fireeye intelligence intelligence-analysis malware mandiant threat threathunting threatintelligence virtual-machine
Language:PowerShell 1261
intelmq
certtools / intelmq
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
cybersecurity threat ioc malware phishing cert csirt intelligence incident-response alerts feeds incident handling automation ihap python
Language:Python 1080
toolswatch / vFeed
The Correlated CVE Vulnerability And Threat Intelligence Database API
cve oval threat-intelligence-database python vfeed cwe capec scap vulnerability-databases vulnerability-detection vulnerability-database-entry vulnerability-identification threat intelligence-gathering exploits vulnerability vulnerability-scanners common-vulnerability-exposure threat-intelligence threatintel
Language:Python 941
cyberark / SkyArk
SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS
admins attacker aws azure cloud cloud-security powershell privileges security-tools threat
Language:PowerShell 885
Yamato-Security / WELA-deprecated
WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）
dfir log analysis forensics incident response sigma windows event logs threat hunting timeline
Language:PowerShell 781
TonyPhipps / SIEM
SIEM Tactics, Techiques, and Procedures
threat hunt red blue purple team incident response baseline monitor analysis scan log forensics triage recon threat-hunting security soc siem
Language:PowerShell 616
manifoldfinance / defi-threat
a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations on decentralized finance
defi threat cve solidity infosec ethereum erc20 erc721 defi-threat threat-matrix smart-contracts nfts advisories blockchain evm smart-contracts-audit kill-chain
Language:JavaScript 490
Meerkat
TonyPhipps / Meerkat
A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
threat hunt red blue purple team incident response baseline monitor analysis scan log forensics triage recon threat-hunting security soc siem
Language:PowerShell 457
TalEliyahu / Threat_Model_Examples
A collection of real-world threat model examples across various technologies, providing practical insights into identifying and mitigating security risks.
risk-assessment threat threat-analysis threat-modeling cybersecurity
427
EXP-Tools / threat-broadcast
威胁情报播报
broadcast cve programming safe threat
Language:Python 384
SupportIntelligence / Icewater
16,432 Free Yara rules created by
yara malware-analysis cluster threat dna
Language:YARA 383
cyberbro
stanfrbd / cyberbro
A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.
blueteam cyber-threat-intelligence cybersecurity dfir docker hash incident-response infosec ioc ipinfo osint osint-python python security security-tools threat threat-hunting threat-intelligence virustotal
Language:HTML 349
opencybersecurityalliance / kestrel-lang
Kestrel threat hunting language: building reusable, composable, and shareable huntflows across different data sources and threat intel.
cybersecurity hacktoberfest language security security-automation security-tools threat threat-hunting threat-intelligence threatintel
Language:Python 311
opencybersecurityalliance / stix-shifter
This project consists of an open source library allowing software to connect to data repositories using STIX Patterning, and return results as STIX Observations.
hacktoberfest python stix2 stix cybersecurity security security-automation security-tools threat threat-hunting threat-intelligence threatintel ocsf
Language:Python 241
Aabyss-Team / Ban-Hacker-IP-Plan
国内恶意IP封禁计划，还赛博空间一片朗朗乾坤
ban-bot ban-hosts ban-ip hacker intelligence ioc malice threat threat-intelligence
240
rastrea2r / rastrea2r
Collecting & Hunting for IOCs with gusto and style
threat hunting ioc security-tools
Language:Python 237
Patrowl / PatrowlHears
PatrowlHears - Vulnerability Intelligence Center / Exploits
api automation cpe cve cvss cybersecurity exploits exploits-scripts patrowl secops soc threat threat-hunting threat-intelligence threatintel vulnerabilities vulnerability-detection vulnerability-identification vulnerability-intelligence vulnerability-scanning
Language:Python 163
SoulSec / resource-threat-hunting
Repository resource for threat hunter
threat threat-hunting threat-intelligence threatintel
158
Graylog2 / graylog-plugin-threatintel
Graylog Processing Pipeline functions to enrich log messages with IoC information from threat intelligence databases
graylog threat otx whois-information abuse graylog-plugin threatintel threat-score threat-analysis spamhaus whois whois-lookup
Language:Java 153
docbleach / DocBleach
:shower: Sanitising your documents, one threat at a time. — Content Disarm & Reconstruction Software
security-tools java office pdf threat content-disarm-reconstruct security
Language:Java 152
usnistgov / mobile-threat-catalogue
NIST/NCCoE Mobile Threat Catalogue
threat catalogue nist mobile
Language:HTML 149
yevh / TaaC-AI
AI-driven Threat modeling-as-a-Code (TaaC-AI)
application-security devsecops gpt gpt-3 gpt-4 secure-development taac threat threat-modeling threat-modeling-from-code threat-modeling-tool threat-models ai llm-security claude-3 mistral-7b
Language:HTML 129
ine-labs / ThreatSeeker
ThreatSeeker: Threat Hunting via Windows Event Logs
evtx log-analysis sysmon threat threat-detection threat-intelligence windows
Language:Python 120
jymcheong / SysmonResources
Consolidation of various resources related to Microsoft Sysmon & sample data/log
sysmon threat threat-hunting
Language:Python 110
MonarcAppFO
monarc-project / MonarcAppFO
MONARC - Method for an Optimised aNAlysis of Risks by @NC3-LU
risk-analysis governance cases security monarc cybersecurity threat vulnerabilities risk-assessment risk-evaluation risk-treatment
Language:Shell 105
CERTCC / Vulnerability-Data-Archive
With the hope that someone finds the data useful, we used to periodically publish an archive of almost all of the non-sensitive vulnerability information in our vulnerability reports database. See also https://github.com/CERTCC/Vulnerability-Data-Archive-Tools
cert cve threat threat-analysis threat-intelligence threatintel vulnerability vulnerability-data vulnerability-notes vulnerability-report
96
CloudDefenseAI / falco_extended_rules
Curating Falco rules with MITRE ATT&CK Matrix
cloudsecurity devops devsecops kuberentes security cnapp cspm security-tools threat-analysis vulnerability-detection vulnerability-scanners falco malware threat threat-modeling container-security kubernetes-security malware-analysis workload-security zero-day
Language:Python 78
rusakovichma / TicTaaC
Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. Sugar-Free and Secure: no any external dependencies except for chart plotting are used
threat-modeling threat-modeling-tool application-security threat-models threat-modeling-from-code threat-model threat secure-development appsec devsecops
Language:Java 62
redrays-io / SAP-Threat-Modeling
The SAP Threat Modeling Tool is an on-premises open-source web application designed to analyze and visualize connections between SAP systems, helping users identify security risks and vulnerabilities. With features like inputting SAP credentials, scanning for connections, and visualizing the network.
modeling sap security threat threat-modeling sap-security
Language:HTML 47
vc0RExor / Quick-Analysis
Quick analysis focusing on most important of a Malware or a Threat
quick-analysis malware threat research
40
MHaggis / app_splunk_sysmon_hunter
Splunk App to assist Sysmon Threat Hunting
sysmon splunk threat
38
EsreverWoW / ClassicThreatMeter
A simple threat meter for WoW Classic (1.13.2)
classic threat threat-meter wow wow-classic
Language:Lua 37
3c7 / aptmap
A map displaying threat actors from the misp-galaxy
apt advanced persistent threat intelligence misp
Language:TypeScript 33

threat

teler-sh / teler

Yamato-Security / hayabusa

activecm / rita-legacy

mandiant / ThreatPursuit-VM

certtools / intelmq

toolswatch / vFeed

cyberark / SkyArk

Yamato-Security / WELA-deprecated

TonyPhipps / SIEM

manifoldfinance / defi-threat

TonyPhipps / Meerkat

TalEliyahu / Threat_Model_Examples

EXP-Tools / threat-broadcast

SupportIntelligence / Icewater

stanfrbd / cyberbro

opencybersecurityalliance / kestrel-lang

opencybersecurityalliance / stix-shifter

Aabyss-Team / Ban-Hacker-IP-Plan

rastrea2r / rastrea2r

Patrowl / PatrowlHears

SoulSec / resource-threat-hunting

Graylog2 / graylog-plugin-threatintel

docbleach / DocBleach

usnistgov / mobile-threat-catalogue

yevh / TaaC-AI

ine-labs / ThreatSeeker

jymcheong / SysmonResources

monarc-project / MonarcAppFO

CERTCC / Vulnerability-Data-Archive

CloudDefenseAI / falco_extended_rules

rusakovichma / TicTaaC

redrays-io / SAP-Threat-Modeling

vc0RExor / Quick-Analysis

MHaggis / app_splunk_sysmon_hunter

EsreverWoW / ClassicThreatMeter

3c7 / aptmap