Free to use IOC feed for various tools/malware. It started out for just C2 tools but has morphed into tracking …
Douglas-042 – Powershell Script To Help Speed Up Threat Hunting Incident Response Processes
DOUGLAS-042 stands as an ingenious embodiment of a PowerShell script meticulously designed to expedite the triage process and facilitate the …
HEDnsExtractor – Raw Html Extractor From Hurricane Electric Portal
Raw html extractor from Hurricane Electric portal Features Automatically identify IPAddr ou Networks through command line parameter or stdin Extract …
SOC-Multitool – A Powerful And User-Friendly Browser Extension That Streamlines Investigations For Security Professionals
Introducing SOC Multi-tool, a free and open-source browser extension that makes investigations faster and more efficient. Now available on the …
ThreatHound – Tool That Help You On Your IR & Threat Hunting And CA
This tool will help you on your IR & Threat Hunting & CA. just drop your event log file and …
Sandbox_Scryer – Tool For Producing Threat Hunting And Intelligence Data From Public Sandbox Detonation Output
The Sandbox Scryer is an open-source tool for producing threat hunting and intelligence data from public sandbox detonation output The …
Whids – Open Source EDR For Windows
What EDR with artifact collection driven by detection. The detection engine is built on top of a previous project Gene …
Matano – The Open-Source Security Lake Platform For AWS
Matano is an open source security lake platform for AWS. It lets you ingest petabytes of security and log data …
Raven – Advanced Cyber Threat Map (Simplified, Customizable, Responsive)
Raven – Advanced Cyber Threat Map (Simplified, customizable and responsive. It uses D3.js with TOPO JSON, has 247 countries, ~100,000 …
DetectionLabELK – A Fork From DetectionLab With ELK Stack Instead Of Splunk
DetectionLabELK is a fork from Chris Long’s DetectionLab with ELK stack instead of Splunk. Description: DetectionLabELK is the perfect lab …