threat-hunting topic
awesome-malware-persistence
A curated list of awesome malware persistence tools and resources.
malware-persistence
Collection of malware persistence and hunting information. Be a persistent persistence hunter!
crowdstrike-falcon-queries
A collection of Splunk's Search Processing Language (SPL) for Threat Hunting with CrowdStrike Falcon
mthc
All-in-one bundle of MISP, TheHive and Cortex
apullo
A scanner for taking basic fingerprints
awesome-threat-detection
✨ A curated list of awesome threat detection and hunting resources 🕵️♂️
fatt
FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic
hassh-utils
hassh-utils: Nmap NSE Script and Docker image for HASSH - the SSH client/server fingerprinting method (https://github.com/salesforce/hassh)
sqhunter
A simple threat hunting tool based on osquery, Salt Open and Cymon API
BLUESPAWN
An Active Defense and EDR software to empower Blue Teams