Stars
Deployment of an Active Directory Tier Model structure to support Tier 0, Tier 1, and Tier 2 objects.
A macOS terminal with session persistence, smart multiplexing, and native UI
Protect against malicious code installed via npm, yarn, pnpm, npx, pnpx, pip, uv and poetry with Aikido Safe Chain. Free to use, no tokens required.
A complete Sigma detection engineering toolkit: parser, linter, evaluator, correlation engine, conversion framework, streaming daemon, MCP and LSP servers 🦀
An online service for converting cyber threat intelligence format, built to promote interoperability and seamless data exchange
Pivotick is network graph library to facilitate pivoting.
Audit-fähige Vorlage für die IT-Sicherheitsdokumentation gemäß KBV-Richtlinie (§ 390 SGB V). Optimiert für Arztpraxen, Psychotherapeuten & MVZ. Inkl. Anlage 1, 2 & 5.
Taranis AI is an advanced Open-Source Intelligence (OSINT) tool, leveraging Artificial Intelligence to revolutionize information gathering and situational analysis.
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
The MAGIC tool is a wrapper around the Microsoft Graph Python SDK, designed to download incident response-relevant data from M365 environments.
The Art of Pivoting - Techniques for Intelligence Analysts to Discover New Relationships in a Complex World
JA4+ is a suite of network fingerprinting standards
🚀 The fast, Pythonic way to build MCP servers and clients.
A plugin-based file analysis framework for Suricata file stores
Tenzir is the data pipeline engine for security teams.
Containerization is a Swift package for running Linux containers on macOS.
Watcher - Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS.
Experimental tools to backdoor large language models by re-writing their system prompts at a raw parameter level. This allows you to potentially execute offline remote code execution without runnin…
Pivot Track is a CLI tool and library that helps Threat Intelligence analysts to pivot on IoCs and to track their research results.
A flexible threat detection platform that simplifies rule management and deployment using K8s CronJob and Helm, but can also run standalone or with other job schedulers like Nomad.
An easy-to-use and lightweight API wrapper for Censys APIs.
⚡️ Catalyst is a self-hosted, open source incident response platform and ticket system that helps to automate alert handling and incident response processes
TIM is a Kusto investigation platform that enables a user to quickly pivot between data sources; annotate their findings; and promotes collaboration through shared queries (pivots) and centralized …