threathunting · GitHub Topics

IntelOwl: manage your Threat Intelligence at scale

翻译 - 英特尔®猫头鹰：从单个API大规模分析文件，域，IP

安全 Python threat-intelligence IoC (Disambiguation)incident-response cyber-threat-intelligence enrichment honeynet OSINT osint-python threatintel malware-analysis threat-hunting Hacktoberfest cyber-security Cybersecurity threathunting dfir

Python 4.05 k

5 小时前

alexandreborges / malwoverview

Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, Threa...

翻译 - Malwoverview是第一个响应工具，可在包含恶意软件样本，特定恶意软件样本，可疑URL和域的目录中执行初始和快速分类。此外，它还允许下载样本并将其发送到主要的在线沙箱。

Malware virustotal malpedia urlhaus alienvault malshare threathunting Cybersecurity malware-analysis threat-hunting threatintelligence

Python 3.11 k

2 个月前

mandiant / ThreatPursuit-VM

Threat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and hunting designed for intel and malware analysts as well a...

翻译 - 威胁追踪虚拟机（VM）：一种完全可自定义的，基于Windows的开源发行版，专注于威胁情报分析和攻击，旨在为情报和恶意软件分析人员以及威胁猎人提供快速启动和运行的机会。

cyber threat threatintelligence threathunting intelligence intelligence-analysis 数据科学 analytics Malware virtual-machine

PowerShell 1.25 k

2 年前

atc-project / atomic-threat-coverage

Actionable analytics designed to combat threats

mitre-attack threathunting threatintelligence

Python 982

3 年前

darkquasar / AzureHunter

A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365

翻译 - 一个 Cloud Forensics Powershell 模块，用于对来自 Azure 和 O365 的数据运行威胁搜寻剧本

Azure digital-forensics cloud-forensics Cybersecurity azuresearcher azforensics threat-hunting threathunting incident-response unifiedauditlog dfir

PowerShell 777

2 年前

tenzir / tenzir

Tenzir is the data pipeline engine for security teams.

incident-response threathunting siem soc 安全 DataOps investigation pcap netflow suricata zeek pipelines sigma Hacktoberfest

C++ 668

1 天前

mthcht / ThreatHunting-Keywords

#Awesome#Awesome list of keywords and artifacts for Threat Hunting sessions

PowerShell 544

9 天前

SlimKQL / Hunting-Queries-Detection-Rules

KQL Queries. Microsoft Defender, Microsoft Sentinel

Azure kql sentinel defender Microsoft mitre-attack threathunting

HTML 505

4 天前

alexverboon / MDATP

#学习与技能提升#MDATP

blogs defender-for-endpoint kql learning threathunting

PowerShell 459

8 个月前

GACWR / OpenUBA

#计算机科学#A robust, and flexible open source User & Entity Behavior Analytics (UEBA) framework used for Security Analytics. Developed with luv by Data Scientists & Security Analysts from the Cyber Security Indu...