GitHub - ai-craftsman404/GuardX: LLM security scanner for Claude Code, with MCP-based testing for prompt injection, RAG risks, and supply-chain exposure.

GitHub - urcuqui/orion: Orion is an AI security framework, inspired by The Art of War, for red and blue teams. It uncovers and mitigates model vulnerabilities with adversarial ML, maps risks to MITRE ...

GitHub - c0m4r/paranoya: Simple IOC and YARA scanner for Linux®

GitHub - R4z1xx/malwatcher: Malwatcher is a self-hosted platform that simplifies the process of verifying IOCs by combining multiple online tools into one interface, eliminating the need to visit each...

GitHub - EclipseManic/ThreatSentry-AI: ThreatSentry AI is an intelligent threat hunting dashboard that leverages machine learning to proactively identify and prioritize risks in your network. It autom...

GitHub - M3rcuryLake/Nyxelf: Nyxelf is a highly effective tool tailored for analyzing malicious Linux ELF binaries, offering comprehensive support for both static and dynamic analysis techniques.

GitHub - muchdogesec/yara2stix: A command line tool that converts the YARA Rules into STIX 2.1 Objects.

GitHub - s-tip/stip-common: Seamless Threat Intelligence Platform

GitHub - matanolabs/matano: Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS

GitHub - SecurityBrewery/catalyst: ⚡️ Catalyst is a self-hosted, open source incident response platform and ticket system that helps to automate alert handling and incident response processes

GitHub - utmstack/UTMStack: Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.

GitHub - nianticlabs/venator: A flexible threat detection platform that simplifies rule management and deployment using K8s CronJob and Helm, but can also run standalone or with other job schedulers l...

GitHub - Yamato-Security/hayabusa: Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

GitHub - yeti-platform/yeti: Your Everyday Threat Intelligence

GitHub - RootMiner/YaraGuard: 👾 YaraGuard is a static malware analysis tool that uses YARA rules as it's core

GitHub - muditmathur2020/RansomwareDetection: Ransomware Detection using Machine Learning Models and Ensemble Technique

GitHub - atenreiro/opensquat: The openSquat is an open-source tool for detecting domain look-alikes by searching for newly registered domains that might be impersonating legit domains and brands.

GitHub - cossacklabs/acra: Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports clien...

GitHub - cossacklabs/acra: Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports clien...

GitHub - ninoseki/mihari: A query aggregator for OSINT based threat hunting

GitHub - ronin-rb/ronin-vulns: Tests URLs for Local File Inclusion (LFI), Remote File Inclusion (RFI), SQL injection (SQLi), and Cross Site Scripting (XSS), Server Side Template Injection (SSTI), an...

abuse.ch | Community First - new authentication, new data, and new functionality

GitHub - ronin-rb/ronin-vulns: Tests URLs for Local File Inclusion (LFI), Remote File Inclusion (RFI), SQL injection (SQLi), and Cross Site Scripting (XSS), Server Side Template Injection (SSTI), an...

Azure-SecOps/KQL/Email-Collab/MS-Advisory-Note-Abuse.kql at main · AttacktheSOC/Azure-SecOps

GitHub - harryeetsource/yara_rules: community generated yara rules for detection of malware families

Free and Affordable DFIR and Cybersecurity Training

Exploit Reversing

Week 46 – 2024

GitHub - prowler-cloud/prowler: Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, har...

GitHub - kpcyrd/sn0int: Semi-automatic OSINT framework and package manager

The Complete Guide on Python for Cyber Security (2025)

GitHub - CodeByHarri/Incident-Response-and-Threat-Hunting: A comprehensive collection of Kusto Query Language (KQL) queries designed for security professionals to detect, hunt, and respond to cyber th...

GitHub - CodeByHarri/Incident-Response-and-Threat-Hunting: A comprehensive collection of Kusto Query Language (KQL) queries designed for security professionals to detect, hunt, and respond to cyber th...

Three separate malware apps for macOS capable of bypassing macOS security tied to North Korean developers

YouTube

GitHub - meirwah/awesome-incident-response: A curated list of tools for incident response

GitHub - N0rz3/Zehef: Zehef is an osint tool to track emails

Dec 25th, 2023: [EN] How to investigate a Malicious Alert for Threat Hunting in Elastic Security

Journey Into Malware Research and Reverse Engineering, Thu, Oct 19, 2023, 8:00 AM | Meetup