A collection of tools and resources for threat hunters. Sections: - Hunting Tools: Open source tools for hunting like Velociraptor, osquery, GRR, ELK, Sysmon, and more. - Resources: Useful resources to get started in Threat Hunting. - Hunting with AI: Leveraging ChatGPT prompts for Threat Hunting. - Must Read: Articles and blog posts covering different aspects of Threat Hunting. - Custom Scripts: Tools and scripts to support different types of hunts.
Common questions about Cyber Threat Hunting including features, pricing, alternatives, and user reviews.
Cyber Threat Hunting is A collection of tools and resources for threat hunters. It is a Security Operations solution designed to help security teams with Open Source, Sysmon.
Cyber Threat Hunting is a free Security Operations tool. This makes it accessible for organizations of all sizes, from startups to enterprises. Visit https://github.com/A3sal0n/CyberThreatHunting/ for download and installation instructions.
Popular alternatives to Cyber Threat Hunting include:
Compare these tools and more at https://cybersectools.com/categories/security-operations
Cyber Threat Hunting is for security teams and organizations that need Open Source, Sysmon. It's particularly suitable for small to medium-sized teams looking for cost-effective solutions. Other Security Operations tools can be found at https://cybersectools.com/categories/security-operations
Managed Agentic Threat Hunting Service (IOC sweeps and hypothesis based hunting)
Search engine for open-source Git repositories with advanced features like case sensitivity and regular expressions.
A threat hunting capability that leverages Sysmon and MITRE ATT&CK on Azure Sentinel
A community-driven repository of pre-built security analytics queries and rules for monitoring and detecting threats in Google Cloud environments across various log sources and activity types.
A community-driven open source project providing interactive notebooks with detection logic, adversary tradecraft, and resources organized according to MITRE ATT&CK framework for threat hunting and detection development.