yara detection rules for hunting with the threathunting-keywords project
awesome-listblueteamdetection-engineeringdfirforensics-toolshacktoolshuntingincident-response
Source: GitHub repository metadata.
Repository search
Find public projects in our local index, with related guides and tools from MetaCyberGuru. Your search is not sent to GitHub.
Explore topic collections for selection checklists and useful search examples.
265 matching repositories.
5,477 indexed in total. Latest successful discovery check: 2026-11-08 09:40:22 UTC.
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
ai-agentsclaude-codecloud-securitycybersecuritydevsecopsethical-hackingincident-responseinfosec
Source: GitHub repository metadata.
Oriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The results are presented in a Web layer to help defenders identify outliers and suspicious behavior on corporate environments.
dfirincident-responsethreat-hunting
Source: GitHub repository metadata.
#ThreatHunting #DFIR #Malware #Detection Mind Maps
detectiondfirforensicsincident-responsemindmapthreat-huntingthreat-intelligencewindows
Source: GitHub repository metadata.
🐍 High-performance, multi-threaded YARA & IOC scanner
dfirincident-responseiocsscanneryara
Source: GitHub repository metadata.
Field reference for BTL1 and Tier 1 SOC work — grep-ready cheatsheets, SPL queries, Volatility workflows, live response commands
blueblue-teamblue-team-toolblueteam-toolsbtl1certificatecertificationcheatsheet
Source: GitHub repository metadata.
🔍 AI-assisted threat-hunting workbench for SOC and DFIR analysts — turns raw PCAPs into actionable intel with a Zeek + tshark pipeline, C2/beacon detection, JA3 fingerprinting, MITRE ATT&CK mapping, OSINT enrichment, and multilingual reports from local or cloud LLMs.
blue-teamcybersecuritydfirincident-responsellmmitre-attacknetwork-forensicsnetwork-security
Source: GitHub repository metadata.
ASN / RPKI validity / BGP stats / IPv4v6 / Prefix / URL / ASPath / Organization / IP reputation / IP geolocation / IP fingerprinting / Network recon / lookup API server / Web traceroute server
apias-pathasnasn-lookupautonomous-systemsbashbgpfingerprinting
Source: GitHub repository metadata.
My learning, tutorials on Cybersecurity
access-controlbusiness-continuityincident-responsenetwork-securitysecurity-operationssecurity-principles
Source: GitHub repository metadata.
Self-hosted AI SRE for Kubernetes — zero-instrumentation eBPF observability plus a copilot that fixes issues through guardrailed, self-verifying actions. BYO-LLM, air-gapped capable.
ai-agentaiopsclickhousedevopsebpfgolangincident-responsekubernetes
Source: GitHub repository metadata.
Complete open-source monitoring and observability platform.
devopsincident-managementincident-responsemonitoringobservabilityon-callstatus-page
Source: GitHub repository metadata.
An ops AI Agent that understands your infrastructure, finds the root cause, and fixes it — right from Slack, Telegram, Lark or DingTalk.
ai-agentsaiopsalertingchatopsdevopsgolanggrafanaincident-response
Source: GitHub repository metadata.
Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-CradleCrafter/Invoke-DOSfuscation payloads
attedredr-solutionsincident-responsemitresecuritysecurity-audit
Source: GitHub repository metadata.
Digler is a tool for forensic disk analysis and file recovery. It's designed to help you unearth lost or deleted data from various disk images and raw devices.
cli-tooldata-recoverydeleted-file-recoverydesktop-appdfxmldigital-forensicsdisk-analysisdisk-image
Source: GitHub repository metadata.
No repository description was provided.
digital-forensicsfilesystemgraph-databaselinuxmerkle-treeneo4joperating-systemsreverse-engineering
Source: GitHub repository metadata.
An open‑source technical wiki connected to the systems it describes
confluence-alternativedashboardincident-responseinternal-documentationknowledge-basemcpmcp-servermetrics
Source: GitHub repository metadata.
Digital Forensics with Kali Linux, published by Packt
brute-force-attacksdigital-forensicsforensicsforensics-investigationshackinginvestigationkali-linuxkali-scripts
Source: GitHub repository metadata.
PagerDuty's Incident Response Documentation.
documentationincident-responseoncallpagerdutyteam-security
Source: GitHub repository metadata.
A repository for using osquery for incident detection and response
detectionincident-responseinformation-securityocto-correct-managedosquery
Source: GitHub repository metadata.
PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform
apiautomationcortexincident-responseiocorchestrationpatrowlsecops
Source: GitHub repository metadata.
What this index tells you
We collect selected public repository metadata through GitHub’s official API and store it on our server. This is not a complete index of GitHub. Categories come from discovery queries and topics; a “skills” or “plugins” result is not a verified installation format. We do not run or audit the projects listed here.
Check the original repository’s licence, installation instructions and maintenance history before using it. Stars do not establish security, and a recent push does not prove that a project works. GitHub may have newer information than our last indexed record.
Search is lexical, not an AI answer engine. Short words and spelling differences can affect matches. This site is independent of GitHub. Report a wrong category, stale result or removal request.