threat-analysis

cowrie/cowrie

Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/

deepfence/ThreatMapper

Open Source Cloud Native Application Protection Platform (CNAPP)

CYB3RMX/Qu1cksc0pe

All-in-One malware analysis tool.

InQuest/ThreatIngestor

Extract and aggregate threat intelligence.

satan1a/TheRoadOfSO

学习安全运营的记录 | The knowledge base of security operation

ion-storm/sysmon-config

Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events.

TalEliyahu/Threat_Model_Examples

A collection of real-world threat model examples across various technologies, providing practical insights into identifying and mitigating security risks.

utkusen/baitroute

A web honeypot library to create vulnerable-looking endpoints to detect and mislead attackers

zdhenard42/SOC-Multitool

A powerful and user-friendly browser extension that streamlines investigations for security professionals.

utmstack/UTMStack

Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.

ecstatic-nobel/OSweep

Don't Just Search OSINT. Sweep It.

t4d/PhishingKitHunter

Find phishing kits which use your brand/organization's files and image.

jackaduma/SecBERT

pretrained BERT model for cyber security text, learned CyberSecurity Knowledge

alvin-tosh/Infosec-and-Hacking-Scripts

🚀 This is a collection of hacking🔥 and pentesting 🧐 scripts to help with enumeration, OSINT, exploitation and post exploitation automated scripts to make hacking easier🌠. Have fun!😎

Graylog2/graylog-plugin-threatintel

Graylog Processing Pipeline functions to enrich log messages with IoC information from threat intelligence databases

mthcht/ThreatIntel-Reports

Raw data from Threat Intelligence Reports with automatic reports collection and keyword search across thousands of reports

ecstatic-nobel/Analyst-Arsenal

A toolkit for Security Researchers

401trg/detections

This repository contains all public indicators identified by 401trg during the course of our investigations. It also includes relevant yara rules and ids signatures to detect these indicators.

ethansilvas/google-cybersecurity

Projects, notes, and write-ups I have done while completing the Google Cybersecurity Certificate

curated-intel/Threat-Actor-Profile-Guide

The Threat Actor Profile Guide for CTI Analysts

CERTCC/Vulnerability-Data-Archive

With the hope that someone finds the data useful, we used to periodically publish an archive of almost all of the non-sensitive vulnerability information in our vulnerability reports database. See also https://github.com/CERTCC/Vulnerability-Data-Archive-Tools

CloudDefenseAI/falco_extended_rules

Curating Falco rules with MITRE ATT&CK Matrix

jackaduma/ThreatReportExtractor

Extracting Attack Behavior from Threat Reports

tatsuiman/malware-traffic-analysis.net

Download pcap files from http://www.malware-traffic-analysis.net/

bobby-tablez/IP-Obfuscator

Hide an IP address in scripts using hex/decimal/octal conversions

jh00nbr/Phishruffus

Intelligent threat hunter and phishing servers

paulveillard/cybersecurity-threat-detection

An ongoing & curated collection of awesome software best practices and remediation techniques, libraries and frameworks, E-books and videos, Technical guidelines and important resources about Threat Detection & Hunting.

Truvis/Suricata_Threat-Hunting-Rules

Collection of Suricata rule sets that I use modified to my environments.

danieleperera/SocAnalystArsenal

Quick SOC L1 ticket structure

AzAgarampur/PsForge

Process Hollowing demonstration & explanation

security-union/going-fishing-with-my-raspberry-pi

401trg/utilities

This repository contains tools used by 401trg.

trickest/packages

Automated compromise detection of the world's most popular packages

SCS-Labs/TheWatchList

Threat Feeds, Threat lists, and regular lists of known IP ranges and domains. It updates every 4 hours.

wisepythagoras/honeyshell

An SSH honeypot written entirely in Go.