threat · GitHub Topics

Real-time HTTP Intrusion Detection

翻译 - 实时HTTP入侵检测

threat-hunting threat-intelligence ids intrusion-detection-system threat-analyzer Go intrusion-detection intrusion threat iocs logs log

Go 3.05 k

1 年前

activecm / rita-legacy

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

翻译 - 真实情报威胁分析

rita network-traffic threat scanning offensive-countermeasures bro-ids blueteam 安全 logs analytics analysis beacon dns

Go 2.51 k

8 个月前

Yamato-Security / hayabusa

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

dfir threat hunting Windows event logs Rust sigma detection attack forensics incident response 安全 Cybersecurity incident-response security-automation threat-hunting

Rust 2.49 k

10 小时前

mandiant / ThreatPursuit-VM

Threat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and hunting designed for intel and malware analysts as well a...

翻译 - 威胁追踪虚拟机（VM）：一种完全可自定义的，基于Windows的开源发行版，专注于威胁情报分析和攻击，旨在为情报和恶意软件分析人员以及威胁猎人提供快速启动和运行的机会。

cyber threat threatintelligence threathunting intelligence intelligence-analysis 数据科学 analytics Malware virtual-machine

PowerShell 1.25 k

2 年前

certtools / intelmq

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

Cybersecurity threat IoC (Disambiguation)Malware phishing cert intelligence incident-response alerts incident handling 自动化 Python

Python 999

7 天前

toolswatch / vFeed

The Correlated CVE Vulnerability And Threat Intelligence Database API

Common Vulnerabilities and Exposures (CVE)Python cwe vulnerability-databases vulnerability-detection threat intelligence-gathering Exploit vulnerability vulnerability-scanners threat-intelligence threatintel

Python 940

4 年前

cyberark / SkyArk

SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS

翻译 - SkyArk帮助发现，评估和保护Azure和AWS中特权最高的实体

cloud-security PowerShell 安全 privileges cloud Amazon Web Services admins attacker threat Azure

PowerShell 883

3 个月前

Yamato-Security / WELA-deprecated

WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）

翻译 - WELA（Windows 事件日志分析器）：用于 Windows 事件日志的瑞士军刀！ゑ罗（ウェラ）

dfir log analysis forensics incident response sigma Windows event logs threat hunting timeline

PowerShell 780

2 年前

TonyPhipps / SIEM

SIEM Tactics, Techiques, and Procedures

threat Red blue purple team incident response baseline 监控 analysis scan log forensics Reconnaissance threat-hunting 安全 soc siem

PowerShell 615

16 天前

manifoldfinance / defi-threat

#区块链#a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations on decentralized finance

defi threat Common Vulnerabilities and Exposures (CVE)Solidity Cybersecurity 以太坊 erc20 erc721 smart-contracts nfts advisories 区块链 evm smart-contracts-audit

JavaScript 491

9 个月前

TonyPhipps / Meerkat

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

threat Red blue purple team incident response baseline 监控 analysis scan log forensics Reconnaissance threat-hunting 安全 soc siem

PowerShell 456

4 个月前

TalEliyahu / Threat_Model_Examples

A collection of real-world threat model examples across various technologies, providing practical insights into identifying and mitigating security risks.

risk-assessment threat threat-analysis threat-modeling Cybersecurity

419

8 天前

SupportIntelligence / Icewater

16,432 Free Yara rules created by

yara malware-analysis cluster threat dna

YARA 382

6 年前

EXP-Tools / threat-broadcast

威胁情报播报

编程 safe Common Vulnerabilities and Exposures (CVE)threat broadcast

Python 380

3 天前

stanfrbd / cyberbro

A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.

Cybersecurity threat-intelligence ipinfo virustotal cyber-threat-intelligence dfir incident-response IoC (Disambiguation)OSINT osint-python Python 安全 threat-hunting blueteam Docker hash threat

HTML 313

3 天前

opencybersecurityalliance / kestrel-lang

Kestrel threat hunting language: building reusable, composable, and shareable huntflows across different data sources and threat intel.

翻译 - Kestrel 威胁狩猎语言

Hacktoberfest 安全 threat-hunting language Cybersecurity security-automation threat threat-intelligence threatintel

Python 308

5 个月前

opencybersecurityalliance / stix-shifter

This project consists of an open source library allowing software to connect to data repositories using STIX Patterning, and return results as STIX Observations.

Hacktoberfest Python stix Cybersecurity 安全 security-automation threat threat-hunting threat-intelligence threatintel

Python 240

2 个月前