Search awesome repositories

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

IntelOwl: manage your Threat Intelligence at scale

A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.

Security sensor for realtime threat detection and protection

Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS

An Active Defense and EDR software to empower Blue Teams

Open Source EDR for Windows

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

Incident Response - Fast suspicious file finder

Open-source security agents for cloud, code and runtime. 45 built-in agents audit AWS, GCP, Azure, Kubernetes, GitHub and GitLab for privilege escalation, public exposure, supply chain and more, or build your own in one markdown file. Live, read-only access to your infrastructure.

Sigma Queries turned into KQL for Defender using pysigma - Automated

TerraSigma - Modern Detection Engineering for the Cloud-Native SIEM Microsoft Sentinel