Pinned Loading

1. awesome-threat-detection awesome-threat-detection Public

   ✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️

   3.5k 626

2. galah galah Public

   Galah: An LLM-powered web honeypot. Wasting attackers' time with faker-than-ever HTTP responses!

   Go 351 33

3. fatt fatt Public

   FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic

   Python 645 93

4. honeyLambda honeyLambda Public

   honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway

   Python 509 54

5. detection-and-response-pipeline detection-and-response-pipeline Public

   ✨ A compilation of suggested tools/services for each component in a detection and response pipeline, along with real-world examples. The purpose is to create a reference hub for designing effective…

   238 19

6. hassh-utils hassh-utils Public

   hassh-utils: Nmap NSE Script and Docker image for HASSH - the SSH client/server fingerprinting method (https://github.com/salesforce/hassh)

   Lua 53 14