beenuar / AiSOC
Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.
soxoj / maigret
🕵️♂️ Collect a dossier on a person by username from 6K websites
kaifcodec / user-scanner
🕵️♂️ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyzes 2720+ actively maintained scan vectors (210+ email / 2510+ username) for security research, investigations, and digital footprinting.
Sheltercosmo / Rilldex-RL-Studio
RL observability for LLM agents: behavior maps, native trainer metrics, rollout investigations, and Python/SQL analysis.
apurvsinghgautam / robin
AI-Powered Dark Web OSINT Tool
OSINT-Experts-Society / Consensus-OSINT
🔎 Username, email & phone OSINT — 9,700+ lookup checks from 19 projects, with profile enrichment, bulk searches, evidence graphs and expert-reviewed updates.
nvk / llm-wiki
LLM-compiled knowledge bases for any AI agent. Parallel multi-agent research, thesis-driven investigation, source ingestion, wiki compilation, querying, and artifact generation.
volatilityfoundation / volatility3
Volatility 3.0 development
frangelbarrera / OSINT-BIBLE
Comprehensive 2026 OSINT field guide: tools, AI intelligence, investigation workflows, threat intel, verification, GEOINT, OPSEC and ethics.
osintshifu / awesome-osint-repos
Continuously updated catalogue of open-source OSINT tools, skills, plugins, MCP servers, and agentic integrations.
7onez / cti-expert
CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex. 120+ commands, 57 techniques, 79 typed MCP tools, deterministic case pipeline + ICD-203 reports. No API keys required for core.
termuxhackers-id / SIGIT
Simple Information Gathering Toolkit
opensanctions / opensanctions
An open database of international sanctions data, persons of interest and politically exposed persons
RomanZhukov9 / Crypto-Recovery-Tool
Python-based cryptocurrency wallet forensics suite supporting 40+ wallet types on Windows, Linux, and macOS. Features encrypted vault analysis, wallet detection, seed recovery, multi-chain address derivation, threaded processing, and TXT/CSV/JSON export. Designed for security research, compliance, incident response, and blockchain investigations.
cisagov / untitledgoosetool
Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.
drego85 / tosint
Tosint is a Telegram OSINT tool that extracts actionable intelligence from bot tokens and chat IDs for security investigations.
zhiyuwang720-dev / CodeSage
AI-powered code review platform that ranks #1 on AACR-Bench with 52.8% precision, 23.4% recall, and 32.4% F1. Plans PR investigations, runs parallel reviewers, and verifies every finding against code evidence.
nickname21kmr / gameops-investigator
Evidence-first game operations incident investigation agent with read-only MCP tools and reproducible evaluations.
bbrepo / agentic-fraud-defense-framework
Open-source research prototype implementing an Agentic AI framework for real-time financial fraud detection, investigation, explainable risk assessment, and human-governed mitigation.
VigilOSS / Vigil
AI harness for long-running code audits, web pentests, and bug bounty hunting, built around how real investigations fail: anchored hypotheses, false negatives, and unreproducible reports.
DresdenGman / the-backtest-that-lied
Evidence-driven forensic investigation: how a near-perfect A-share ML prediction signal collapsed under rigorous validation
dboudreau00 / NocTORnal
Self-hosted case system for cybercrime investigators. A social network graph where every entity and tie traces to a graded assertion on a WORM-locked exhibit with chain of custody. FastAPI and Postgres, row-level security, TLP gating, two-person controls, one egress proxy.
LuckinSven / 8086-xcheck-system
XCheck IP Reputation Investigation System