hunting 开源项目推荐（178 个）

OTRF /ThreatHunter-Playbook

一个社区驱动的开源项目，共享检测逻辑、对手间谍技术和资源，以提高检测开发的效率。

hacklcx /HFish

安全、可靠、简单、免费的企业级蜜罐

Cyb3rWard0g /HELK

The Hunting ELK

Yamato-Security /hayabusa

HayabUSA（）是一款基于Sigma的威胁狩猎和快速取证时间轴生成器，用于Windows事件日志。

Security-Onion-Solutions /security-onion

Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management

microsoft /Microsoft-365-Defender-Hunting-Queries

Microsoft 365 Defender中高级狩猎的示例查询

FalconForceTeam /FalconFriday

威胁狩猎查询与检测

Yamato-Security /WELA-deprecated

WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）

THORCollective /HEARTH

A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters to share knowledge, collaborate on techniques, and advance the field of threat hunting.

DefensiveOrigins /AtomicPurpleTeam

Atomic Purple Team Framework and Lifecycle

eshlomo1 /Microsoft-Sentinel-SecOps

Microsoft Sentinel SOC Operations

jurelou /epagneul

Graph Visualization for windows event logs

rastrea2r /rastrea2r

Collecting & Hunting for IOCs with gusto and style

Yamato-Security /suzaku

Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.

alexverboon /Hunting-Queries-Detection-Rules

KQL Queries. Microsoft Defender, Microsoft Sentinel

burpheart /hachimi

哈基米 一个分布式蜜网系统 | hachimi A Distributed Honeypot System

Pymmdrza /Pyromid

Pyromid For Hack and Cracking Private Key and Address Bitcoin Wallet From Mnemonic [Words - Passphrase]

wortell /KQL

KQL queries for Advanced Hunting

mthcht /ThreatHunting-Keywords-yara-rules

yara detection rules for hunting with the threathunting-keywords project

Pymmdrza /Pro2WordBTC

Bitcoin Crack and Hunting Private Key With Mnemonic [HACK] Passphrase 12-24 words and check value of address (transaction & balance)