threat-hunting · GitHub Topics | GitHub 中文社区

MISP

MISP Project@MISP

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

翻译 - MISP（核心软件）-开源威胁情报和共享平台（以前称为恶意软件信息共享平台）

misp threat-sharing threat-hunting threatintel malware-analysis stix information-exchange fraud-management security cti

PHP5.4 k

1 天前

dnstwist

Marcin Ulikowski@elceef

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

翻译 - 域名置换引擎，用于检测打字错误，网络钓鱼和企业间谍活动

phishing typosquatting domains dns osint idn fuzzing threat-hunting homograph-attack scanner

Python4.92 k

2 个月前

suricata

Open Information Security Foundation@OISF

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.

翻译 - OISF维护的Suricata git存储库

security ids ips nsm network-monitoring suricata intrusion-detection-system intrusion-prevention-system threat-hunting cybersecurity

C4.72 k

1 天前

ThreatHunter-Playbook

@OTRF

A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

翻译 - 威胁猎人的剧本，有助于发展狩猎活动的技术和假设。

threat-hunting sysmon hunting-campaigns hypothesis hunting dfir hunter mitre-attack-db mitre

Python4.03 k

9 个月前

teler

@teler-sh

Real-time HTTP Intrusion Detection

翻译 - 实时HTTP入侵检测

threat-hunting threat-intelligence ids intrusion-detection-system threat-analyzer go golang intrusion-detection intrusion threat

Go3.02 k

9 个月前

chainsaw

@WithSecureLabs

Rapidly Search and Hunt through Windows Forensic Artefacts

翻译 - 快速搜索和搜寻 Windows 事件日志

attack rust security threat-hunting blueteam chainsaw detection dfir forensics logs

Rust2.89 k

1 天前

EVTX-ATTACK-SAMPLES

@sbousseaden

Windows Events Attack Samples

翻译 - Windows 事件攻击示例

threat-hunting evtx windows-security mitre-attack detection-engineering dataset winlogbeat dfir

HTML2.25 k

2 年前

matano

@matanolabs

Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS

aws cloud security big-data serverless apache-iceberg log-analytics log-management logging threat-hunting

Rust1.47 k

4 个月前

YaraHunter

@deepfence

🔍🔍 Malware scanner for cloud-native, as part of CI/CD and at Runtime 🔍🔍

devsecops devsecops-best-practices devsecops-pipeline ioc malware threat-hunting yara yara-scanner ci-cd hacktoberfest

Go1.27 k

8 天前

Hunting-Queries-Detection-Rules

@Bert-JanP

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

azure defender-for-endpoint dfir kql sentinel threat-hunting vulnerability-management zero-day blueteam cybersecurity

Python1.27 k

9 天前

APT-Hunter

@ahmedkhlief

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspi...

翻译 - APT-Hunter是Windows事件日志的威胁搜寻工具，紫色团队的心态使该工具能够检测Windows事件日志中隐藏的APT移动，以减少发现可疑活动的时间

threat-hunting purpleteam python3 windows-eventlog apt-attacks incident-response forensic-analysis windows-event-logs

Python1.26 k

16 天前

BLUESPAWN

@ION28

An Active Defense and EDR software to empower Blue Teams

翻译 - 主动防御和EDR软件可增强Blue Teams的能力

active-defense windows security security-tools blue-team mitre-attack anti-virus edr threat-hunting

C++1.24 k

1 年前

Ukraine-Cyber-Operations

@curated-intel

Curated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional free threat intelligence. Slava Ukraini. Glory to U...

翻译 - 策展情报与来自世界各地的分析师合作，为乌克兰寻求额外免费威胁情报的组织提供有用的信息。乌克兰斯拉瓦。荣耀属于乌克兰。

ukraine osint cti threat-intelligence iocs threat-hunting yara malware

YARA914

1 年前