One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

The SOC Analysts all-in-one CLI tool to automate and speed up workflow.

A modular, skill-based autonomous Security Operations Center (SOC) agent that monitors OpenSearch/Elasticsearch data, builds RAG-based behavioral memory, and validates real-time anomalies using LLMs.

PatrowlHears - Vulnerability Intelligence Center / Exploits

🐝 Ransomware Detection using Machine Learning with eBPF for Linux.

Given a job title and job description, the algorithm assigns a standard occupational classification (SOC) code to the job.

Luckfox pico documentation and experiments

An experiment for building gateware for the axiom micro / beta using amaranth-hdl

Given a job title and job description, the algorithm assigns a standard occupational classification (SOC) code to the job.

FaceFusion is an AI-powered tool that delivers high-quality face enhancements and realistic face swaps. Using models like GFPGAN, Real-ESRGAN, and InsightFace, it’s perfect for film studios, content creators, and designers seeking efficient and affordable visual effects if developed fully.

Developed VisionSoC, an advanced image upscaling model using Enhanced Super Resolution Generative Adversarial Networks (ESRGAN) with Python, leveraging frameworks such as TensorFlow and Keras. Created a comprehensive web-based application for the model using HTML, CSS, and JavaScript, and integrated the frontend with the backend using Flask.

A SOC Analyst's tool to automate the investigation & validation of possible Indicators of Compromise (IOCs) and perform various tasks including Phishing Email Analysis & Brand Monitoring to fasten the incident response.

SOC Analyst Level 1 Replacement using RAG LLM

NHSuite allows users to efficiently manage their QRadar Network Hierarchy. Utilizing the provided QRadar API, users can seamlessly export, import, and fetch domain information in a CSV format.

Blackhat 2025 presentation and codebase: AI SOC agent & MCP server for automated security investigation, alert triage, and incident response. Integrates with ELK, IRIS, and other platforms.

Real-time intrusion detection system that monitors honeypot files and sends instant Discord alerts when unauthorized access is detected. Built for Homelabs.

IOC triage at terminal speed — pip install iocx

Automate your SOC with SEKOIA.IO's Automation Library. Pull Requests are always welcome and highly appreciated!

EDA Analytics Central

Outlines a scalable SOC optimization approach tailored for Palo Alto Networks Cortex XSIAM.