cyber-defense 开源项目推荐（85 个）

backbay-labs /clawdstrike

开发者工作站和自主代理车队的AI电子数据管理。用爪击构建群聚侦测与响应平台。

KC7-Foundation /kc7

A cybersecurity game in Azure Data Explorer

MaheshShukla1 /SOC-Analyst-Notes

Comprehensive SOC Analyst notes covering incident response, threat hunting, SOC workflows, and cybersecurity concepts—perfect for exam prep and skill-building in blue team operations.

NotYuSheng /TracePcap

Self-hosted PCAP analysis platform with LLM-powered incident triage, signature-based threat detection, and AI-generated incident narratives. Features network change monitoring across captures, deep packet inspection via nDPI, and automated Wireshark filter generation. Runs fully offline with local LLMs (Ollama, LM Studio).

center-for-threat-informed-defense /sensor-mappings-to-attack

Sensor Mappings to ATT&CK is a collection of resources to assist cyber defenders with understanding which sensors and events can help detect real-world adversary behaviors in their environments.

edoardottt /boggart

Highly customizable low-interaction experimental honeypot that mimics specific hosts.

deathlabs /hades

Harnessing AI to Disrupt and Evaluate Security (HADES)

ccelikanil /GhostBeacon

CLI-based 802.11 Rogue (Fake) AP & Hidden AP Spotter

codershiyar /cybersecurity

هذا المشروع يحتوي على جميع الدروس والموارد لكورس تعلم الأمن السيبراني من إعداد Coder Shiyar. مناسب للمبتدئين ومن يريدون تحسين مهاراتهم في الأمن السيبراني، اختبار الاختراق، أمان الشبكات، وتقنيات الحماية الأخلاقية.

Panagiotis-INS /Cyber-Defenders

This repo is all about Blue teamming and CyberDefenders Write-up for their DFIR challenges

Yousha /DFIR-Specialist-Roadmap

Digital forensic (DFIR) specialist roadmap.

IlyaOrson /CyberDreamcatcher

An Attentive Graph Agent for Topology-Adaptive Cyber Defence

ridgelinecyberdefence /Enterprise-Detection-Engineering

Production-validated detection queries and hunting artifacts across 9 platforms (KQL, Sigma, Splunk, Athena, PowerShell, Velociraptor, YARA, Suricata, osquery). Each with triggers, false positives, tuning guidance, and validation steps.

Elijahhx /Dead1ock-h4ck

"Dead1ock-h4ck" is an open-source project dedicated to exploring cybersecurity and ethical hacking techniques. The project aims to provide resources and tools for learning about network security, cryptography, and penetration testing.

mayank02raj /MITRE-ATTACK-based-Attack-Chain-Prediction

Hybrid LSTM-Markov attack chain forecasting for MITRE ATT&CK. Learns from 4,849 campaign chains + 8,437 real intrusion traces. Generates 26,051 risk-ranked multi-step attack futures via constrained beam search. 86% next-step accuracy, 0.76 Pearson correlation with NCISS severity. SECRYPT 2026 submission.

d0midigi /hackherway

☮︎ ▪︎ hackherway cyberepo ▪︎ learn how to hackherway ▪︎ the hacker way ▪︎ ☮︎

ItsMeTinku /Cyber-Attack-Detection

AI-powered cybersecurity monitoring platform that detects suspicious digital attacks, analyzes threat patterns, visualizes intrusion risks, and assists in proactive cyber defense management.

rposchinger /OpenMTD

OpenMTD - A framework for efficient MTD evaluation

sunilgentyala /pace-framework

Proactive AI-driven cyber-physical escalation-aware defense — doctrinal architecture for U.S. cyber defense at machine speed.

afshinShh /ObsNotes

I use this repo as a backup of my notes. knowledge is free and meant to be shared. feel free to use it at your own wish :)