Skip to content

Repository search

Find public projects in our local index, with related guides and tools from MetaCyberGuru. Your search is not sent to GitHub.

Explore topic collections for selection checklists and useful search examples.

Clear filters

265 matching repositories.

5,477 indexed in total. Latest successful discovery check: 2026-11-08 09:40:22 UTC.

A role-playing game for incident management training

Language
HTML
Licence
MIT
Stars
202
Last push
2024-02-27
Indexed
2026-11-08

chaos-engineeringdevopsincident-managementincident-responseincident-scenariooncall-engineerspostmortemreliability

Source: GitHub repository metadata.

Build AI-powered security tools. 50+ hands-on labs covering ML, LLMs, RAG, threat detection, DFIR, and red teaming. Includes Colab notebooks, Docker environment, and CTF challenges.

Language
Python
Licence
Not specified
Stars
170
Last push
2026-09-25
Indexed
2026-11-08

adversarial-mlaiblue-teamcloud-securityctfcybersecuritydfirdocker

Source: GitHub repository metadata.

A vendor-neutral collection of Sigma, YARA, and Suricata rules for detecting compromise of LLM applications, MCP servers, ML supply chains, AI infrastructure, AI-powered insider threats, and RAG/vector database attacks.

Language
Python
Licence
Apache-2.0
Stars
156
Last push
2026-11-02
Indexed
2026-11-08

ai-securitydetection-engineeringdfirforensicsincident-responsellm-securitymcpsigma

Source: GitHub repository metadata.

Collaborative Incident Response platform

Language
Shell
Licence
LGPL-3.0
Stars
1,621
Last push
2026-10-22
Indexed
2026-11-08

csirt-toolingdigital-forensicsdigital-forensics-incident-responseforensicforensic-analysisforensic-toolsincident-responsepython

Source: GitHub repository metadata.

Forensics artefact collection tool for systems running Microsoft Windows

Language
C++
Licence
LGPL-2.1
Stars
453
Last push
2026-10-08
Indexed
2026-11-08

collectiondfirincident-response

Source: GitHub repository metadata.

Digital Forensics Investigation Platform

Language
JavaScript
Licence
Not specified
Stars
915
Last push
2024-10-12
Indexed
2026-11-08

artifactsdfirdigital-forensicsincident-responseparsersecurity

Source: GitHub repository metadata.

DFIRTrack - The Incident Response Tracking Application

Language
Python
Licence
Not specified
Stars
539
Last push
2026-01-13
Indexed
2026-11-08

dfirdigital-forensicsincident-managementincident-responseincident-response-tooling

Source: GitHub repository metadata.

Load Windows Event Log (.evtx) files into Elasticsearch, or export them as JSON lines. Born on an offline threat hunt; rebuilt for Elasticsearch 9.

Language
Python
Licence
Apache-2.0
Stars
122
Last push
2026-10-26
Indexed
2026-11-08

blue-teamdfirelasticsearchevtxforensicsincident-responselog-analysispython

Source: GitHub repository metadata.

A curated list of awesome Memory Forensics for DFIR

Language
Not specified
Licence
CC0-1.0
Stars
579
Last push
2026-10-20
Indexed
2026-11-08

awesomeawesome-listdigital-forensicsdigital-forensics-incident-responseforensicsincident-responsemalwaremalware-analysis

Source: GitHub repository metadata.

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

Language
Batchfile
Licence
Not specified
Stars
487
Last push
2021-02-21
Indexed
2026-11-08

bashbatchcybersecuritydfirforensicsincident-responsemalwarenirsoft

Source: GitHub repository metadata.

Agentic OSINT toolkit. Autonomous identity triangulation, 6-dimension cognitive profiling, breach analysis. CLI-first. 30+ platforms. 5 languages.

Language
Python
Licence
MIT
Stars
293
Last push
2026-11-07
Indexed
2026-11-08

agentic-aiclicyber-securitycyber-threat-intelligencecybersecurity-toolsdeepseekdigital-forensicsidentity-intelligence

Source: GitHub repository metadata.

Quickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Security Numbers and a lot More From Text

Language
Rust
Licence
Apache-2.0
Stars
909
Last push
2024-02-28
Indexed
2026-11-08

bug-bountyctf-toolscybersecurityemailfile-searchhackingincident-responseinfosec

Source: GitHub repository metadata.

A portable OSINT Swiss Army Knife for DFIR/OSINT professionals 🕵️ 🕵️ 🕵️

Language
Python
Licence
MIT
Stars
284
Last push
2023-10-18
Indexed
2026-11-08

dfirincident-responseincident-response-toolinginfosecinfosec-19osintosint-professionalsosint-python

Source: GitHub repository metadata.

ThePhish: an automated phishing email analysis tool

Language
Python
Licence
AGPL-3.0
Stars
1,383
Last push
2024-08-01
Indexed
2026-11-08

attackcyberdefensecybersecuritydetectiondigital-forensicsemailfreeincident-response

Source: GitHub repository metadata.

Information gathering & website reconnaissance | https://phishstats.info/

Language
Shell
Licence
MIT
Stars
459
Last push
2019-05-27
Indexed
2026-11-08

abusedomainincident-responseinformation-extractioninformation-gatheringmalicious-domainsmalwareosint

Source: GitHub repository metadata.

Microsoft Sentinel SOC Operations

Language
PowerShell
Licence
MIT
Stars
270
Last push
2026-07-24
Indexed
2026-11-08

azureazure-sentinelcloudsecurityhuntingincident-responseirmicrosoftmicrosoft-sentinel

Source: GitHub repository metadata.

Next-gen AI-native server ops panel with an in-workspace SRE agent. Crash self-healing, safe rollbacks, Docker/game servers, and local Ollama support.

Language
TypeScript
Licence
Apache-2.0
Stars
184
Last push
2026-11-08
Indexed
2026-11-08

ai-agentdevopsdockerfastifyhomelabincident-responselinuxlocal-llm

Source: GitHub repository metadata.

Get-MiniTimeline - Triage Collection and Timeline Generation w/ KAPE

Language
PowerShell
Licence
MIT
Stars
37
Last push
2024-05-25
Indexed
2026-11-08

dfirdigital-forensicsincident-responsekapepowershelltimeline

Source: GitHub repository metadata.

An open-source security platform for the community. Unified SIEM, SOAR, WAF, and more in a single, self-hosted solution.

Language
Python
Licence
MIT
Stars
134
Last push
2026-11-08
Indexed
2026-11-08

cspmdevsecopsdockerfastapiincident-responsesecuritysecurity-toolsself-hosted

Source: GitHub repository metadata.

AIFT is a GUI, CLI, REST API, and MCP tool that helps DFIR analysts get oriented quickly. Point it at disk images, VM images, forensic archives, or triage packages; AIFT discovers what can be opened, parses artifacts with Dissect, and uses AI to turn parsed data into concrete leads and gaps for the investigator to verify.

Language
Python
Licence
AGPL-3.0
Stars
53
Last push
2026-06-13
Indexed
2026-11-08

aiaiftchatgptclaudedfirdfir-automationdfir-toolsdigital-forensics

Source: GitHub repository metadata.

What this index tells you

We collect selected public repository metadata through GitHub’s official API and store it on our server. This is not a complete index of GitHub. Categories come from discovery queries and topics; a “skills” or “plugins” result is not a verified installation format. We do not run or audit the projects listed here.

Check the original repository’s licence, installation instructions and maintenance history before using it. Stars do not establish security, and a recent push does not prove that a project works. GitHub may have newer information than our last indexed record.

Search is lexical, not an AI answer engine. Short words and spelling differences can affect matches. This site is independent of GitHub. Report a wrong category, stale result or removal request.