jiwoochris / artex-global
ARTEX νκ΅μ΄ν Β· AI μμ¨ μΉ¨ν¬ ν μ€νΈ νλ μμν¬(upstream: Autumn-27/ARTEX, AGPL-3.0)
jiwoochris / artex-global
elastic / detection-rules
β
Karib0u / rustinel
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
bdg9412 / artex-ko-plus
ARTEX νκ΅μ΄ν Β·AI κΈ°λ° μΉ¨ν΄μ¬κ³ λμ κΈ°λ₯ μΆκ° (upstream: Autumn-27/ARTEX, AGPL-3.0)
beenuar / AiSOC
Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.
uber / ADR
ADR secures enterprise AI agents through observability, security benchmarking, and threat detection. Deployed at Uber.
cyb3rxp / awesome-soc
A curated knowledge base to build, run and mature a SOC (including CSIRT).
kunai-project / kunai
Threat-hunting tool for Linux
Krishita17 / PhantomTap
A Flipper Zero that stops guessing and starts reasoning: ML-guided RFID/NFC fuzzing & access-control auditing that turns raw card reads into a prioritized, explainable security assessment. Defensive-use only.
rabbitstack / fibratus
Security sensor for realtime threat detection and protection
DataDog / stratus-red-team
:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
thalesgroup-cert / Watcher
Watcher - Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS.
infosecB / awesome-detection-engineering
Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.
cyb3rmik3 / KQL-threat-hunting-queries
A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 Defender).
utmstack / UTMStack
Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.
turbot / tailpipe
select * from logs; Tailpipe is an open source SIEM for instant log insights, powered by DuckDB. Analyze millions of events in seconds, right from your terminal.
lenny-ts / caddy-analyzer
Fast, zero-dependency access log analyzer, security threat inspector, and TUI dashboard for Caddy v2
psihijatrija / Sentinel
Userland EDR for Windows. ETW telemetry, behavioral correlation, MITRE ATT&CK.
kaifcodec / phonsint
π΅οΈββοΈ Advanced phone number OSINT suite engineered for silent reconnaissance. Extracts masked emails, profile avatars and uncovers cross-platform account registrations, and enriches identity footprints with zero SMS alerts.