GitHub - ai-craftsman404/GuardX: LLM security scanner for Claude Code, with MCP-based testing for prompt injection, RAG risks, and supply-chain exposure.

GitHub - urcuqui/orion: Orion is an AI security framework, inspired by The Art of War, for red and blue teams. It uncovers and mitigates model vulnerabilities with adversarial ML, maps risks to MITRE ...

GitHub - idaholab/Malcolm: Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

GitHub - c0m4r/paranoya: Simple IOC and YARA scanner for Linux®

GitHub - R4z1xx/malwatcher: Malwatcher is a self-hosted platform that simplifies the process of verifying IOCs by combining multiple online tools into one interface, eliminating the need to visit each...

GitHub - EclipseManic/ThreatSentry-AI: ThreatSentry AI is an intelligent threat hunting dashboard that leverages machine learning to proactively identify and prioritize risks in your network. It autom...

GitHub - M3rcuryLake/Nyxelf: Nyxelf is a highly effective tool tailored for analyzing malicious Linux ELF binaries, offering comprehensive support for both static and dynamic analysis techniques.

GitHub - muchdogesec/yara2stix: A command line tool that converts the YARA Rules into STIX 2.1 Objects.

GitHub - s-tip/stip-common: Seamless Threat Intelligence Platform

GitHub - matanolabs/matano: Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS

GitHub - SecurityBrewery/catalyst: ⚡️ Catalyst is a self-hosted, open source incident response platform and ticket system that helps to automate alert handling and incident response processes

GitHub - utmstack/UTMStack: Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.

GitHub - nianticlabs/venator: A flexible threat detection platform that simplifies rule management and deployment using K8s CronJob and Helm, but can also run standalone or with other job schedulers l...

GitHub - Yamato-Security/hayabusa: Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

GitHub - yeti-platform/yeti: Your Everyday Threat Intelligence

GitHub - RootMiner/YaraGuard: 👾 YaraGuard is a static malware analysis tool that uses YARA rules as it's core

GitHub - muditmathur2020/RansomwareDetection: Ransomware Detection using Machine Learning Models and Ensemble Technique

GitHub - atenreiro/opensquat: The openSquat is an open-source tool for detecting domain look-alikes by searching for newly registered domains that might be impersonating legit domains and brands.

GitHub - cossacklabs/acra: Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports clien...

GitHub - cossacklabs/acra: Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports clien...

GitHub - ninoseki/mihari: A query aggregator for OSINT based threat hunting

GitHub - ronin-rb/ronin-vulns: Tests URLs for Local File Inclusion (LFI), Remote File Inclusion (RFI), SQL injection (SQLi), and Cross Site Scripting (XSS), Server Side Template Injection (SSTI), an...

abuse.ch | Community First - new authentication, new data, and new functionality

malware-traffic-analysis.net

GitHub - ronin-rb/ronin-vulns: Tests URLs for Local File Inclusion (LFI), Remote File Inclusion (RFI), SQL injection (SQLi), and Cross Site Scripting (XSS), Server Side Template Injection (SSTI), an...

Azure-SecOps/KQL/Email-Collab/MS-Advisory-Note-Abuse.kql at main · AttacktheSOC/Azure-SecOps

GitHub - harryeetsource/yara_rules: community generated yara rules for detection of malware families

Free and Affordable DFIR and Cybersecurity Training