All Categories → Security → hunting

Top 12 hunting open source projects

Threathunter Playbook

A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.

✭ 2,879

python YARA Dockerfile dfir threat-hunting sysmon hunting hunter mitre hypothesis hunting-campaigns mitre-attack-db

安全、可靠、简单、免费的企业级蜜罐

✭ 2,977

honeypot hunting

Awesome Threat Detection

A curated list of awesome threat detection and hunting resources

✭ 1,804

security awesome awesome-list detection resources threat-hunting intrusion-detection hunting

Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management

✭ 2,956

dfir intrusion-detection ids network-security-monitoring log-management nsm hunting

The Hunting ELK

✭ 3,097

Jupyter Notebook CSS shell jupyter-notebook docker elasticsearch spark kibana logstash threat-hunting elk elastic elk-stack dockerhub hunting hunting-platforms

KQL queries for Advanced Hunting

✭ 110

security hunting kql

Microsoft-Defender-for-Endpoint-Queries

Microsoft Defender for Endpoint Hunting Queries

✭ 26

hunting mde edr mdatp microsoft-defender

WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）

✭ 442

powershell windows log analysis timeline logs event threat forensics dfir response hunting sigma incident

r2yara - Module for Yara using radare2 information

✭ 30

c python malware hunting radare2 yara r2

Azure-Sentinel-4-SecOps

Microsoft Sentinel SOC Operations

✭ 140

powershell HTML CSS M4 microsoft security azure incident-response secops threat-hunting siem hunting soc ir cloudsecurity threat-intelligence azure-sentinel microsoft-sentinel

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

✭ 908

rust windows security attack detection ninja logs event threat forensics dfir response hunting sigma incident takoyaki yamato hayabusa

Simple Windows Event Log Forwarder (SWELF). Its easy to use/simply works Log Forwarder and EVTX Parser. Almost in full release here at https://github.com/ceramicskate0/SWELF/releases/latest.

✭ 23

C#windows analytics analysis dotnet detection logging logs cybersecurity sysmon siem hunting forwarder defense eventlog log-forwarder evtx logging-framework logging-agent windowsevents

1-12 of 12 hunting projects