Skip to content

@socfortress SOCFortress

All

    Repositories list

    87 repositories

    • velociraptor-mcp-server

      Public
      Repo to hold mcp server for velociraptor
      Python
      •
      GNU Affero General Public License v3.0
      •9•41•0•0•Updated Oct 11, 2026Oct 11, 2026

    • wazuh-mcp-server

      Public
      Repo to hold wazuh manager mcp server
      Python
      •
      GNU Affero General Public License v3.0
      •26•93•3•0•Updated Oct 11, 2026Oct 11, 2026

    • CoPilot

      Public
      SOCFortress CoPilot
      Python
      •
      GNU Affero General Public License v3.0
      •140•535•3•0•Updated Oct 10, 2026Oct 10, 2026

    • socfortress-uba-deploy

      Public
      Run SOCFortress UBA (User Behavior Analytics for CoPilot) with Docker Compose
      PowerShell
      •
      GNU Affero General Public License v3.0
      •1•3•1•0•Updated Oct 10, 2026Oct 10, 2026

    • OPENCTI-MIDDLEWARE

      Public
      Fast Graylog lookup-table backend for OpenCTI indicator enrichment
      Python
      •2•2•0•0•Updated Oct 7, 2026Oct 7, 2026

    • OSSIEM

      Public
      Open Source SIEM Stack
      Shell
      •
      GNU General Public License v3.0
      •59•160•0•0•Updated Sep 30, 2026Sep 30, 2026

    • WINDOWS-ENSURE-FIREWALL-ENABLED-COPILOT-ACTION

      Public
      repo to hold WINDOWS-ENSURE-FIREWALL-ENABLED-ACTIVERESPONSE
      PowerShell
      •1•0•0•0•Updated Sep 3, 2026Sep 3, 2026

    • WINDOWS-LIST-SCHEDULED-TASKS-COPILOT-ACTION

      Public
      repo to hold WINDOWS-LIST-SCHEDULED-TASKS-ACTIVERESPONSE
      PowerShell
      •1•0•0•0•Updated Sep 3, 2026Sep 3, 2026

    • WINDOWS-FIREWALL-APP-UNBLOCK-COPILOT-ACTION

      Public
      repo to hold WINDOWS-FIREWALL-APP-UNBLOCK
      PowerShell
      •1•0•0•0•Updated Sep 2, 2026Sep 2, 2026

    • WINDOWS-LIST-SAVED-CREDENTIALS-COPILOT-ACTION

      Public
      repo to hold WINDOWS-LIST-SAVED-CREDENTIALS-ACTIVERESPONSE
      PowerShell
      •1•0•0•0•Updated Sep 2, 2026Sep 2, 2026

    • WINDOWS-LIST-LISTENING-PORTS-COPILOT-ACTION

      Public
      repo to hold WINDOWS-LIST-LISTENING-PORTS-ACTIVERESPONSE
      PowerShell
      •1•0•0•0•Updated Sep 2, 2026Sep 2, 2026

    • WINDOWS-QUARANTINE-MALICIOUS-FILE-COPILOT-ACTION

      Public
      repo to hold WINDOWS-QUARANTINE-MALICIOUS-FILE-ACTIVERESPONSE
      PowerShell
      •1•0•0•0•Updated Sep 2, 2026Sep 2, 2026

    • WINDOWS-FIREWALL-IP-UNBLOCK-COPILOT-ACTION

      Public
      repo to hold WINDOWS-FIREWALL-IP-UNBLOCK
      PowerShell
      •1•0•0•0•Updated Sep 2, 2026Sep 2, 2026

    • WINDOWS-REMOVE-ROGUE-SOFTWARE-BY-PATH-COPILOT-ACTION

      Public
      PowerShell
      •1•0•0•0•Updated Sep 2, 2026Sep 2, 2026

    • WINDOWS-FIREWALL-APP-BLOCK-COPILOT-ACTION

      Public
      repo to hold WINDOWS-FIREWALL-APP-BLOCK
      PowerShell
      •1•0•0•0•Updated Sep 2, 2026Sep 2, 2026

    • WINDOWS-FIREWALLBLOCK-COPILOT-ACTION

      Public
      Repo to hold Windows Firewall block Active Response
      PowerShell
      •1•0•0•0•Updated Sep 2, 2026Sep 2, 2026

    • CoPilot-Case-Templates

      Public
      CoPilot-Case-Templates
      1•0•0•0•Updated Aug 25, 2026Aug 25, 2026

    • appva-deploy

      Public
      AppVA — Application Vulnerability Assessment. Deploy via Docker.
      1•2•0•0•Updated Aug 21, 2026Aug 21, 2026

    • appva-demo-app

      Public
      Intentionally vulnerable demo app — the scan target for AppVA. Do not deploy.
      JavaScript
      •
      MIT License
      •0•0•0•0•Updated Aug 19, 2026Aug 19, 2026

    • socfortress-llm-security-public

      Public
      Self-hosted OWASP LLM Top 10 security testing for your own Ollama and OpenAI-compatible endpoints
      Shell
      •
      MIT License
      •2•3•0•0•Updated Aug 18, 2026Aug 18, 2026

    • CoPilot-Search-Queries

      Public
      Repo to hold search queries made by CoPilot
      Python
      •
      GNU General Public License v3.0
      •3•4•0•0•Updated Aug 13, 2026Aug 13, 2026

    • waf-platform-public

      Public
      Other
      •19•68•4•0•Updated Jun 24, 2026Jun 24, 2026

    • copilot-mcp-server

      Public
      Repo to hold SOCFortress CoPilot MCP Tools used by SOC AI Agent
      Python
      •
      Apache License 2.0
      •1•3•0•0•Updated Jun 3, 2026Jun 3, 2026

    • shuffle-mcp-server

      Public
      Repo to hold Shuffle MCP Tools used by SOC AI Agent
      Python
      •
      Apache License 2.0
      •1•1•0•0•Updated Apr 30, 2026Apr 30, 2026

    • VELOCIRAPTOR-CLIENT-UPGRADE

      Public
      Repo to hold upgrade scripts for Velociraptor client upgrades
      PowerShell
      •
      Apache License 2.0
      •1•1•0•0•Updated Apr 8, 2026Apr 8, 2026

    • Wazuh-Rules

      Public
      Advanced Wazuh Rules for more accurate threat detection. Feel free to implement within your own Wazuh environment, contribute, or fork!
      Python
      •320•1.4k•22•11•Updated Mar 11, 2026Mar 11, 2026

    • CoPilot-SCA

      Public
      Repo to store SCA scans available within CoPilot
      Apache License 2.0
      •1•0•0•0•Updated Mar 10, 2026Mar 10, 2026

    • IOC-HUNTER

      Public
      Ioc center
      Python
      •1•0•0•0•Updated Mar 10, 2026Mar 10, 2026

    • docs

      Public
      MDX
      •
      MIT License
      •0•1•0•0•Updated Feb 15, 2026Feb 15, 2026

    • OFFICE365-IMPOSSIBLE-TRAVEL

      Public template
      Repo to hold Office365 Impossible Travel Application
      Python
      •2•6•0•0•Updated Feb 1, 2026Feb 1, 2026
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.