A repository for using osquery for incident detection and response

A curated list of Awesome Threat Intelligence resources

🎓 Path to a free self-taught education in Computer Science!

Free hands-on digital forensics labs for students and faculty

A high-speed forensic processing engine purpose-built for DFIR investigators. Quickly consolidate CSV output from processed triage evidence into a unified timeline with built-in filtering, artifact…

FULL v0, Cursor, Manus, Same.dev, Lovable, Devin, Replit Agent, Windsurf Agent & VSCode Agent (And other Open Sourced) System Prompts, Tools & AI Models.

sandbox approach for malware developers and red teamers to test payloads against detection mechanisms before deployment

TUI app- Give it a YouTube URL and you get a transcription with possible speaker identification and optional summary or translation, all thanks to open-source AI tooling and my lack of enough free …

A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.

Event Tracing For Windows (ETW) Resources

AI-powered tool designed to help producing Threat Intelligence Mindmap.

Cisco Orbital - Osquery queries by Talos

Linux #rootkit and #malware revealer

MasterParser is a powerful DFIR tool designed for analyzing and parsing Linux logs

USN Journal full path builder

reNgine is an automated reconnaissance framework for web applications

Instant voice cloning by MyShell.

C2 Active Scanner

Jupyter notebooks helping open source researchers, journalists, and fact-checkers use command line tools and code projects for digital investigations.

ForgeArmory provides TTPs that can be used with the TTPForge (https://github.com/facebookincubator/ttpforge).

Collection of Cyber Threat Intelligence sources from the deep and dark web

Large language model evaluation and workflow framework from Phase AI.

Search for c2 servers based on netlas

Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azur…

Crawlector is a threat hunting framework designed for scanning websites for malicious objects.

capture SSL/TLS text content without CA cert using eBPF. supports Linux/Android x86_64/Aarch64.

Open Source EDR for Windows