Popular repositories Loading

1. eventhunter eventhunter Public

   CLI tool that parses Windows Event Logs (.evtx) and flags brute force, privilege escalation, malicious PowerShell, backdoor accounts, and log tampering, mapped to MITRE ATT&CK.

   Python

2. pcap-traffic-analyzer pcap-traffic-analyzer Public

   Offline PCAP analyzer that detects port scans, ARP spoofing, plaintext credentials, and C2 beaconing from packet captures

   Python

3. soc-alert-triage soc-alert-triage Public

   Deduplicates and scores raw security alerts into a prioritized SOC triage queue, with zero runtime dependencies

   Python