All projects
Repositories in this selection 24 · UTC 2026-11-05
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—Mmukul975 / Anthropic-Cybersecurity-Skills817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0PythonApache-2.0 · PermissiveInsufficient rank history35,4504,318——2026-08-31
2—OOISF / suricataSuricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.CGPL-2.0 · Share derivative sourceInsufficient rank history6,8121,785——2026-11-02
3—MMISP / MISPMISP (core software) - Open Source Threat Intelligence and Sharing PlatformPHPAGPL-3.0 · Share derivative sourceInsufficient rank history6,6381,659——2026-11-02
4—Eelceef / dnstwistDomain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonationPythonApache-2.0 · PermissiveInsufficient rank history5,771856——2025-04-15
5—SSwiftOnSecurity / sysmon-configSysmon configuration file template with default high-quality event tracingUnknownUnknown · Restricted / unknownInsufficient rank history5,7191,865——2024-07-03
6—SSecurity-Onion-Solutions / securityonionSecurity Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.ShellNOASSERTION · Restricted / unknownInsufficient rank history4,964683——2026-11-02
7—Iintelowlproject / IntelOwlIntelOwl: manage your Threat Intelligence at scalePythonAGPL-3.0 · Share derivative sourceInsufficient rank history4,789708——2026-11-03
8—00x4D31 / awesome-threat-detection✨ A curated list of awesome threat detection and hunting resources 🕵️♂️UnknownUnknown · Restricted / unknownInsufficient rank history4,780769——2026-01-05
9—OOTRF / ThreatHunter-PlaybookA community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.PythonMIT · PermissiveInsufficient rank history4,707866——2026-01-12
10—Ppedramamini / awesome-yaraA curated list of awesome YARA rules, tools, and people.UnknownNOASSERTION · Restricted / unknownInsufficient rank history4,313553——2026-06-15
11—Aalexandreborges / malwoverviewMalwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.PythonGPL-3.0 · Share derivative sourceInsufficient rank history4,136556——2026-09-22
12—CCyb3rWard0g / HELKThe Hunting ELKJupyter NotebookGPL-3.0 · Share derivative sourceInsufficient rank history3,934690——2024-06-01
13—WWithSecureOpenSource / chainsawRapidly Search and Hunt through Windows Forensic ArtefactsRustGPL-3.0 · Share derivative sourceInsufficient rank history3,706310——2026-10-14
14—YYamato-Security / hayabusaHayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.RustAGPL-3.0 · Share derivative sourceInsufficient rank history3,435302——2026-11-01
15—Ssbousseaden / EVTX-ATTACK-SAMPLESWindows Events Attack SamplesHTMLGPL-3.0 · Share derivative sourceInsufficient rank history2,643439——2023-01-24
16—Rrabbitstack / fibratusSecurity sensor for realtime threat detection and protectionGoNOASSERTION · Restricted / unknownInsufficient rank history2,565222——2026-11-02
17—Mmatanolabs / matanoOpen source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWSRustApache-2.0 · PermissiveInsufficient rank history1,707120——2025-01-08
18—SStamusNetworks / Clear-NDR-ISOA Suricata based NDR distributionShellGPL-3.0 · Share derivative sourceInsufficient rank history1,591288——2025-09-13
19—SStamusNetworks / sciriusScirius is a web application for Suricata ruleset management and threat hunting.PythonGPL-3.0 · Share derivative sourceInsufficient rank history686155——2026-05-22
20—TTonyPhipps / MeerkatA collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.PowerShellGPL-3.0 · Share derivative sourceInsufficient rank history48384——2024-11-15
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.