Skip to content

Entry

ThreatHunter-Playbook

Appears in 4 awesome lists

Collection of hunting playbooks organized by MITRE ATT&CK technique, each including hypothesis, required data sources, analytical queries (Spark, Elastic), and sample datasets to validate detection logic before deploying to production.

Open github.comotrf/threathunter-playbook

Found in these lists

Awesome Incident Response

Section: Playbooks · Playbook to aid the development of techniques and hypothesis for hunting campaigns.

FreshScore 89

Awesome Threat Detection and Hunting

Section: Detection Rules · A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

SlowScore 57

Awesome Hacking

Section: Other Useful Repositories · A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns

FreshScore 94

Hacking Tools

Section: Threat Hunting · Collection of hunting playbooks organized by MITRE ATT&CK technique, each including hypothesis, required data sources, analytical queries (Spark, Elastic), and sample datasets to validate detection logic before deploying to production.

FreshScore 91

awesome-shell

A list of awesome shell tools and resources, including libraries and scripts for enhancing the command-line experience.

In 11 listsDetails

Free Programming Books

In multiple languages – Free programming books organized into language-specific collections.

In 8 listsDetails

Web Security

Reader and rewriter of EXIF informations that supports raw files.

In 6 listsDetails

PayloadsAllTheThings

An API key is a unique identifier that is used to authenticate requests associated with your project. Some developers might hardcode them or leave it on public shares.

In 13 listsDetails

Awesome ML for Cybersecurity

Curated list of tools and resources related to the use of machine learning for cyber security

In 3 listsDetails

CyberChef

The "Cyber Swiss Army Knife" web application from GCHQ for encryption, encoding, compression, and data analysis. Provides a drag-and-drop interface for chaining operations including Base64, AES, RSA, hashing, and classical ciphers, with 36,000+ GitHub stars.

In 7 listsDetails

API Security Checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API.

In 7 listsDetails

Executable Packing

Executable packing tools, research, and resources.

In 3 listsDetails