All projects
Repositories in this selection 18 · UTC 2026-11-03
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—Ttoniblyx / my-arsenal-of-aws-security-toolsList of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.ShellApache-2.0 · PermissiveInsufficient rank history9,5281,581——2026-10-02
2—Mmeirwah / awesome-incident-responseA curated list of tools for incident responseUnknownApache-2.0 · PermissiveInsufficient rank history9,5281,765——2026-10-13
3—LLOLBAS-Project / LOLBASLiving Off The Land Binaries And Scripts - (LOLBins and LOLScripts)XSLTGPL-3.0 · Share derivative sourceInsufficient rank history8,9081,181——2026-09-26
4—Zzeek / zeekZeek is a powerful network analysis framework that is much different from the typical IDS you may know.C++NOASSERTION · Restricted / unknownInsufficient rank history8,1671,443——2026-11-03
5—Ccugu / awesome-forensics⭐️ A curated list of awesome forensic analysis tools and resourcesUnknownCC0-1.0 · PermissiveInsufficient rank history5,236785——2026-09-26
6—Cclong / DetectionLabAuthor description: Automate the creation of a lab environment complete with security tooling and logging best practicesHTMLMIT · PermissiveInsufficient rank history5,0541,009——2024-07-06
7—Iintelowlproject / IntelOwlIntelOwl: manage your Threat Intelligence at scalePythonAGPL-3.0 · Share derivative sourceInsufficient rank history4,789708——2026-11-03
8—OOTRF / ThreatHunter-PlaybookA community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.PythonMIT · PermissiveInsufficient rank history4,707866——2026-01-12
9—NNeo23x0 / LokiLoki - Simple IOC and YARA ScannerPythonGPL-3.0 · Share derivative sourceInsufficient rank history3,802611——2026-01-12
10—WWithSecureOpenSource / chainsawRapidly Search and Hunt through Windows Forensic ArtefactsRustGPL-3.0 · Share derivative sourceInsufficient rank history3,706310——2026-10-14
11—Ggoogle / timesketchCollaborative forensic timeline analysisPythonApache-2.0 · PermissiveInsufficient rank history3,448669——2026-11-01
12—YYamato-Security / hayabusaHayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.RustAGPL-3.0 · Share derivative sourceInsufficient rank history3,435302——2026-11-01
13—Mmikeroyal / Digital-Forensics-GuideDigital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.PythonUnknown · Restricted / unknownInsufficient rank history3,208400——2024-01-04
14—Ssbousseaden / EVTX-ATTACK-SAMPLESWindows Events Attack SamplesHTMLGPL-3.0 · Share derivative sourceInsufficient rank history2,643439——2023-01-24
15—Mmatanolabs / matanoOpen source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWSRustApache-2.0 · PermissiveInsufficient rank history1,707120——2025-01-08
16—Ddiogo-fernan / ir-rescueA Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.BatchfileNOASSERTION · Restricted / unknownInsufficient rank history48790——2021-02-21
17—Hhelixmap / sigwoodLocal-first threat hunting for the logs you already have: Zeek, Pi-hole, syslog or the systemd journal, CloudTrail. Every run names the technique behind each detector. No agent, no daemon, no black box - between grep and a SIEM.PythonMIT · PermissiveInsufficient rank history34514——2026-10-29
18—Ccodeyourweb / fastfinderIncident Response - Fast suspicious file finderGoNOASSERTION · Restricted / unknownInsufficient rank history26127——2026-01-24
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.