eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
- Language
- Go
- Licence
- Apache-2.0
- Stars
- 12,133
- Last push
- 2026-11-01
- Indexed
- 2026-11-08
cloud-nativedevopsdockerebpfgolanggrpcincident-responsekubernetes
Source: GitHub repository metadata.
I developed a rigorous cybersecurity project portfolio on mock clients covering NIST, audits, Linux, SQL, assets, threats, vulnerabilities, detection, incident response, escalation, Wireshark, tcpdump, IDS (Suricata), SIEM (Splunk, Chronicle), and Python automation.
- Language
- Jupyter Notebook
- Licence
- MIT
- Stars
- 188
- Last push
- 2025-07-19
- Indexed
- 2026-11-08
chroniclecybersecurityescalationidsincident-responselinuxnistpasta
Source: GitHub repository metadata.
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
- Language
- PowerShell
- Licence
- Not specified
- Stars
- 2,152
- Last push
- 2024-12-11
- Indexed
- 2026-11-08
incident-responsemalware-detectionpersistencepowershellpowershell-modulepowershell-scriptregistrytechniques
Source: GitHub repository metadata.
macOS forensic acquisition made simple
- Language
- Python
- Licence
- GPL-3.0
- Stars
- 321
- Last push
- 2026-06-02
- Indexed
- 2026-11-08
appledfirdfir-toolsdigital-forensicsforensic-toolsforensicsmac
Source: GitHub repository metadata.
Threat Hunting query in Microsoft 365 Defender, XDR. Provide out-of-the-box KQL hunting queries - App, Email, Identity and Endpoint.
- Language
- Not specified
- Licence
- Not specified
- Stars
- 490
- Last push
- 2024-11-22
- Indexed
- 2026-11-08
edrincident-responsekqlkustothreat-huntingxdr
Source: GitHub repository metadata.
Cover various security approaches to attack techniques and also provides new discoveries about security breaches.
- Language
- PowerShell
- Licence
- Not specified
- Stars
- 490
- Last push
- 2025-04-17
- Indexed
- 2026-11-08
attack-defenseincident-responsemalware-analysisthreat-huntingvulnerability
Source: GitHub repository metadata.
Interactive visual reference of 118 Digital Forensics & Incident Response (DFIR) tools organized into 9 categories. Includes a high-resolution printable poster.
- Language
- JavaScript
- Licence
- Not specified
- Stars
- 43
- Last push
- 2026-09-09
- Indexed
- 2026-11-08
dfirdfir-automationdfir-toolsdigital-forensicsperiodic-table
Source: GitHub repository metadata.
Self-hosted GRC platform for small and mid-sized security teams: risk management, controls, audits, vendor risk and incident response for ISO 27001, SOC 2, NIST CSF, HIPAA, and more.
- Language
- PHP
- Licence
- Not specified
- Stars
- 163
- Last push
- 2026-10-08
- Indexed
- 2026-11-08
auditcompliancecybersecuritygrcincident-responseiso27001nist-csfrisk-management
Source: GitHub repository metadata.
Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR
- Language
- PowerShell
- Licence
- GPL-3.0
- Stars
- 272
- Last push
- 2025-10-29
- Indexed
- 2026-11-08
dfirdigital-forensicsincident-responselive-responsememory-acquisitionmemory-forensicspowershell
Source: GitHub repository metadata.
macos-collector - Automated Collection of macOS Forensic Artifacts for DFIR
- Language
- Shell
- Licence
- MIT
- Stars
- 55
- Last push
- 2026-09-13
- Indexed
- 2026-11-08
appledfirdfir-toolsdigital-forensicsforensic-toolsincident-responsemacos
Source: GitHub repository metadata.
MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR
- Language
- PowerShell
- Licence
- GPL-3.0
- Stars
- 744
- Last push
- 2026-08-31
- Indexed
- 2026-11-08
dfirdigital-forensicsincident-responselive-responsememory-forensicsmemprocfspowershell
Source: GitHub repository metadata.
A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID
- Language
- PowerShell
- Licence
- GPL-3.0
- Stars
- 690
- Last push
- 2026-10-26
- Indexed
- 2026-11-08
azure-active-directoryincident-responsemicrosoft-365microsoft-entramicrosoft-graphpowershell
Source: GitHub repository metadata.
No repository description was provided.
- Language
- Not specified
- Licence
- MIT
- Stars
- 203
- Last push
- 2024-03-11
- Indexed
- 2026-11-08
incident-responsesecuritysecurity-playbooks
Source: GitHub repository metadata.
a forensic carver with a soft heart · 基于 Rust、Tauri 2 与 Vue 3 的桌面磁盘取证与数据恢复工具:只读解析镜像、文件系统与加密卷,提供原类型预览、全局搜索、时间线、文件雕刻与插件分析
- Language
- Rust
- Licence
- AGPL-3.0
- Stars
- 67
- Last push
- 2026-11-08
- Indexed
- 2026-11-08
bitlockerctfdata-recoverydfirdigital-forensicsdisk-imagefile-carvingforensics
Source: GitHub repository metadata.
A curated repository of incident response playbooks
- Language
- PowerShell
- Licence
- Not specified
- Stars
- 148
- Last push
- 2023-07-17
- Indexed
- 2026-11-08
cybersecurityincident-responseplaybooksecurity-automationsecurity-orchestrationsoar
Source: GitHub repository metadata.
Notes for red teamers - from cloud to Active Directory to many things in between.
- Language
- Python
- Licence
- Not specified
- Stars
- 68
- Last push
- 2026-01-07
- Indexed
- 2026-11-08
active-directorycheatsheetcheatsheetsdigital-forensicsexploithackinghacking-toolsoscp
Source: GitHub repository metadata.
Comprehensive SOC Analyst notes covering incident response, threat hunting, SOC workflows, and cybersecurity concepts—perfect for exam prep and skill-building in blue team operations.
- Language
- Not specified
- Licence
- MIT
- Stars
- 157
- Last push
- 2026-02-26
- Indexed
- 2026-11-08
blue-teamcyber-defensecybersecuritycybersecurity-notescybersecurity-trainingincident-responsesecurity-analystsecurity-operations-center
Source: GitHub repository metadata.
Local-first AI-powered document intelligence platform for investigative journalism
- Language
- Python
- Licence
- MIT
- Stars
- 502
- Last push
- 2026-01-25
- Indexed
- 2026-11-08
air-gappeddata-visualizationdigital-forensicsdockerdocument-intelligenceedge-aientity-extractionintelligence-analysis
Source: GitHub repository metadata.
A list of cyber-chef recipes and curated links
- Language
- Not specified
- Licence
- Not specified
- Stars
- 2,228
- Last push
- 2024-06-14
- Indexed
- 2026-11-08
cyberchefcyberchef-recipesdata-manipulationdfirincident-responsemalwareregular-expression
Source: GitHub repository metadata.
Memory Scaner
- Language
- Python
- Licence
- Not specified
- Stars
- 64
- Last push
- 2022-09-09
- Indexed
- 2026-11-08
dfirdigital-forensicsmemoryreflective-dll-load
Source: GitHub repository metadata.
What this index tells you
We collect selected public repository metadata through GitHub’s official API and store it on our server. This is not a complete index of GitHub. Categories come from discovery queries and topics; a “skills” or “plugins” result is not a verified installation format. We do not run or audit the projects listed here.
Check the original repository’s licence, installation instructions and maintenance history before using it. Stars do not establish security, and a recent push does not prove that a project works. GitHub may have newer information than our last indexed record.
Search is lexical, not an AI answer engine. Short words and spelling differences can affect matches. This site is independent of GitHub. Report a wrong category, stale result or removal request.