Cyb3rWard0g/ThreatHunter-Playbook

• vvard0g/threathunter-playbook

  VVard0g/ThreatHunter-Playbook

  4,594GitHub पर देखें↗

  ThreatHunter-Playbook is a collection of standardized playbooks, detection libraries, and tradecraft guides designed to inform threat hunt planning. It provides a security detection repository of validated queries and hypotheses, alongside an adversary tradecraft guide that details system behaviors and data sources associated with attacker techniques. The project focuses on the development of hunt blueprints and the standardization of detection logic. It integrates the MITRE ATT&CK framework to map detections and hypotheses to adversary tactics and techniques, ensuring coverage analysis is st

  Python

  GitHub पर देखें↗4,594
• otrf/threathunter-playbook

  OTRF/ThreatHunter-Playbook

  4,591GitHub पर देखें↗

  ThreatHunter-Playbook is a threat hunting playbook framework and detection engineering workflow designed to standardize the security detection lifecycle. It functions as a community-driven repository for adversary tradecraft and detection logic, using interactive notebooks to combine technical documentation with executable analytics. The project provides a validation suite for testing security hypotheses against pre-recorded telemetry datasets. This ensures that detection logic is verified in local or cloud environments before being deployed to production. The framework covers security detec

  Pythondfirhunterhunting

  GitHub पर देखें↗4,591
• withsecurelabs/chainsaw

  WithSecureLabs/chainsaw

  3,446GitHub पर देखें↗

  Chainsaw is a Windows forensic analysis tool used for parsing system databases and extracting security artefacts. It functions as a forensic artefact extractor and a scanner for identifying security threats and log tampering within Windows event logs. The project distinguishes itself by implementing a Sigma rule forensic scanner that applies standardized detection logic and custom rule sets to event logs and forensic artefacts. It enables threat hunting workflows by matching event data against patterns to identify malicious activity, lateral movement, and brute force attacks. The tool's capa

  Rustattackblueteamchainsaw

  GitHub पर देखें↗3,446
• smicallef/spiderfoot

  smicallef/spiderfoot

  18,189GitHub पर देखें↗

  SpiderFoot is an open-source reconnaissance and intelligence automation framework designed to streamline the collection and correlation of data for security investigations. It functions as a comprehensive platform that automates the querying of hundreds of public data sources to map digital footprints, identify exposed assets, and uncover potential security threats across an organization's external perimeter. The platform distinguishes itself through a modular, plugin-based architecture that executes data gathering tasks in parallel, supported by a directed graph data model that tracks relati

  Pythonattacksurfacecticybersecurity

  GitHub पर देखें↗18,189

अक्सर पूछे जाने वाले प्रश्न