fibratus
Adversary hunter
Detects and mitigates advanced threat tradecraft by analyzing system events and behavior patterns
Adversary tradecraft detection, protection, and hunting
2k stars
70 watching
194 forks
Language: Go
last commit: 4 months ago
Linked from 6 awesome lists
adversaryblueteamedretwgolanginstrumentationpythonsecuritywindowswindows-kernel
Related projects:
Repository | Description | Stars |
---|---|---|
| A tool for hunting and tracking Internet of Things (IoT) security threats by collecting and analyzing indicators of compromise (IOCs) | 116 |
| Tool to compare IP addresses or hostnames to threat intelligence feeds and detect potential security threats. | 138 |
| A collection of tools and resources for threat hunters to identify and respond to cyber threats. | 861 |
| A community-driven project providing shared detection logic and resources for threat hunting | 4,049 |
| A platform for searching and analyzing publicly available online data to detect potential security threats | 515 |
| A tool to quickly deploy a threat hunting capability on Azure Sentinel using Sysmon and MITRE ATT&CK | 1,062 |
| An adversary emulation platform used to test and improve network security defenses by simulating malware infections | 6,697 |
| Automated platform for discovering and analyzing cybersecurity threats targeting an organization | 869 |
| A tool to generate adversarial text examples and test machine learning models against them | 399 |
| An aggregator tool for querying multiple services to gather threat intelligence data. | 870 |
| Utilities for simulating adversary behavior in the context of threat intelligence and security analysis | 1,011 |
| A PowerShell repository to simulate and train threat hunting skills without malicious files. | 134 |
| An intelligence tool for searching and storing indicators across multiple security feeds. | 149 |
| A Python toolkit for generating adversarial examples to test the robustness of natural language processing models | 699 |
| A language and runtime framework for building reusable, composable threat hunting workflows using Python. | 302 |