security intelligence cybersecurity fraud-management threat-hunting malware-analysis information-exchange misp threat-sharing threatintel stix fraud-prevention cti information-security information-sharing threat-analysis fraud-detection threat-intelligence threat-intel threat-intelligence-platform

dns osint scanner phishing domains fuzzing threat-hunting typosquatting threat-intelligence homograph-attack idn

windows monitoring logging sysmon threat-hunting threatintel netsec sysinternals

docker elasticsearch kibana logstash spark jupyter-notebook elk threat-hunting dockerhub elastic hunting elk-stack hunting-platforms

dfir sysmon threat-hunting hunting hunter mitre hypothesis hunting-campaigns mitre-attack-db

security awesome detection resources intrusion-detection awesome-list threat-hunting hunting

ioc awesome awesome-list threat-hunting malware-analysis malware-research yara yara-rules malware-detection yara-manager yara-signatures malware-rules yara-scanner awesome-yara

ioc scanner anti-virus signature hash dfir threat-hunting yara yara-rules threat-intelligence

modular dfir sysmon threat-hunting security-tools mitre-attack

intelligence enrichment dfir infosec threat-hunting threat-sharing threatintel

security graph incident-response dfir threat-hunting digital-forensics forensic-analysis

windows monitoring logging sysmon threat-hunting threatintel netsec sysinternals threat-intelligence

splunk dfir threat-hunting mitre-attack

linux threat-hunting auditd attack-detection mitre-attack

azure detection logging cybersecurity sysmon threat-hunting siem security-tools blue-team mitre-attack workbooks sysmon-config terraform-azure kql azure-sentinel

threat-hunting klara yara-rules threat-intelligence

graylog logging dfir sysmon threat-hunting threat-sharing threatintel netsec sysinternals graylog-plugin threat-analysis threat-intelligence mitre-attack

windows security anti-virus threat-hunting security-tools blue-team edr mitre-attack active-defense

python tls ssh metadata security network honeypot rdp threat-hunting fingerprinting quic tshark

command-line incident-response malware threat-hunting malware-analysis malware-detection fcl file-less

ioc osint dfir threat-hunting malware-research misp threat-sharing threatintel yara threat-analysis fraud-detection intelligence-gathering security-tools threat-intelligence soar indicators-of-compromise threat-feeds threat-intelligence-platform

api ioc automation incident-response orchestration secops threat-hunting thehive vulnerability-detection vulnerability-management vulnerability-scanners security-scanner security-automation security-tools threat-intelligence patrowl cortext

security monitor log analysis red blue scan threat forensics response purple baseline threat-hunting hunt recon team siem soc incident triage

chrome-extension security censys shodan osint incident-response whois dfir cert threat-hunting misp threat-sharing threatintel cve virustotal passivetotal threatminer circl alienvault ibm-xforce

malware classification threat-hunting information-exchange misp stix misp-galaxy threat-actors threat-intelligence adversaries mitre-adversarial-tactics attack-patternon adversary-groups

dfir threat-hunting siem mitre-attack threat-detection

malware threat-hunting threat-actors cybercrime threat-intelligence threat-intel apt-reports apts

collection malware threat-hunting malware-analysis malware-research threat-sharing threat-modeling yara-rules threat-intelligence malware-detection

osint phishing infosec threat-hunting threatintel fraud-detection threat-intelligence investigation phishing-sites scammers phishing-kit

computer-science open-source regular-expression test-automation environment-variables penetration-testing dynamic-analysis awesome-list test-data threat-hunting html-entities network-discovery domain-name information-security password-cracker security-tools exploit-development attack-modeling dictionary-search http-headers