A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
-
Updated
Jan 12, 2026 - Python
#
hunting
Here are 159 public repositories matching this topic...
The Hunting ELK
docker elasticsearch kibana logstash spark jupyter-notebook elk threat-hunting dockerhub elastic hunting elk-stack hunting-platforms
-
Updated
Jun 1, 2024 - Jupyter Notebook
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
windows rust security attack detection incident-response logs event threat forensics dfir cybersecurity response threat-hunting hunting sigma incident security-automation yamato hayabusa
-
Updated
Aug 3, 2026 - Rust
Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management
-
Updated
Apr 16, 2021
Sample queries for Advanced hunting in Microsoft 365 Defender
-
Updated
Feb 17, 2022 - Jupyter Notebook
Hunting queries and detections
-
Updated
May 7, 2026
A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters to share knowledge, collaborate on techniques, and advance the field of threat hunting.
cybersecurity infosec threat-hunting threatintel hunting threat-analysis threat-intelligence threat-intel threat-detection threathunting cybersec infosectools threatresearch cybersecurity-tools thrunting
-
Updated
Aug 11, 2026 - HTML
Atomic Purple Team Framework and Lifecycle
-
Updated
Feb 11, 2021
Microsoft Sentinel SOC Operations
microsoft security azure incident-response secops threat-hunting siem hunting soc ir cloudsecurity threat-intelligence azure-sentinel microsoft-sentinel
-
Updated
Jul 24, 2026 - PowerShell
Graph Visualization for windows event logs
security forensics threat-hunting hunting blueteam security-tools evtx dfir-automation forensics-tools
-
Updated
Jan 15, 2025 - Python
Collecting & Hunting for IOCs with gusto and style
-
Updated
Aug 1, 2021 - Python
KQL Queries. Microsoft Defender, Microsoft Sentinel
security azure detection sentinel dfir hunting azuread kql defenderforendpoint defenderforidentity entraid defenderxdr
-
Updated
Jun 29, 2026
Pyromid For Hack and Cracking Private Key and Address Bitcoin Wallet From Mnemonic [Words - Passphrase]
bitcoin key private wallet hunting crack mnemonic mnemonic-phrase mnemonic-generator pyromid bitcoinprivatekey
-
Updated
Sep 30, 2024 - Python
yara detection rules for hunting with the threathunting-keywords project
incident-response dfir awesome-list threat-hunting hunting offensive-security yara-rules blueteam threat-intelligence yara-forensics hacktools yara-signatures yara-scanner detection-engineering forensics-tools
-
Updated
May 11, 2025 - YARA
Bitcoin Crack and Hunting Private Key With Mnemonic [HACK] Passphrase 12-24 words and check value of address (transaction & balance)
-
Updated
Sep 19, 2025 - Python
Improve this page
Add a description, image, and links to the hunting topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the hunting topic, visit your repo's landing page and select "manage topics."