Tag: threat hunting

Malwoverview is an open-source threat hunting tool aggregating 17+ intelligence sources including VirusTotal, Shodan, and AbuseIPDB. Features LLM-powered AI enrichment, YARA scanning, IOC extraction, and privacy-first design for rapid malware triage.

Clawdstrike is a fail-closed policy engine and cryptographic attestation runtime for AI agent systems. Learn how this open-source EDR alternative stops shadow agents, signs every decision with Ed25519 proofs, and provides formally verified security enforcement at the tool boundary.

Discover mthcht/awesome-lists: 50+ auto-updating detection lists for SOC, DFIR, and CTI teams. Stop building threat intelligence from scratch and supercharge your SIEM with battle-tested, SIEM-ready artifacts.

Discover how Mandiant's capa automatically identifies malware capabilities in executable files. This open-source tool from the FLARE team maps capabilities to MITRE ATT&CK, supports static and dynamic analysis, and accelerates reverse engineering workflows.

Security Onion 2.4 is a free, open-source platform revolutionizing threat hunting and enterprise security monitoring. Learn installation, configuration, and real-world use cases in this comprehensive technical guide.

Aurora Incident Response revolutionizes IR documentation with visual timelines, lateral movement graphs, and battle-tested workflows. This open-source Electron app replaces the infamous 'Spreadsheet of Doom' with modern, collaborative investigation management. Learn setup, code internals, and real-world use cases in this comprehensive guide.

Discover awesome-forensics, the ultimate curated list of 100+ free digital forensic analysis tools. From memory forensics to IOC scanning, master DFIR with this essential toolkit that transforms incident response capabilities.