Project Name	Stars	Most Recent Commit	Open Issues	License	Language
Sysmon Dfir	872	4 months ago		gpl-3.0
Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.
Cyberthreathunting	755	5 months ago		gpl-3.0	Python
A collection of resources for Threat Hunters - Sponsored by Falcon Guard
Grafiki	300	a year ago		lgpl-3.0	Python
Threat Hunting tool about Sysmon and graphs
Apt06202001	197	4 years ago			HTML
Applied Purple Teaming - (ITOCI4hr) - Infrastructure, Threat Optics, and Continuous Improvement - June 6, 2020
Tylium	87	2 years ago	1	other
Primary data pipelines for intrusion detection, security analytics and threat hunting
Detection Sources	43	5 years ago		mit

Sysmonresources	40	3 years ago			Python
Consolidation of various resources related to Microsoft Sysmon & sample data/log
Elk Hunting	39	6 years ago			PowerShell
Threat Hunting with ELK Workshop (InfoSecWorld 2017)
Threat Hunting	34	6 years ago			Shell
This repo is dedicated to all my tricks, tweaks and modules for testing and hunting threats. This repo contains multiple directories which are in their own, different modules required for threat hunting. This repo will be updated as and when new changes are made.
App_splunk_sysmon_hunter	33	7 years ago		gpl-3.0
Splunk App to assist Sysmon Threat Hunting

Alternatives To Sysmonresources

Select To Compare

Sysmon Dfir ⭐ 872

Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.

most recent commit 4 months ago

Cyberthreathunting ⭐ 755

A collection of resources for Threat Hunters - Sponsored by Falcon Guard

most recent commit 5 months ago

Grafiki ⭐ 300

Threat Hunting tool about Sysmon and graphs

most recent commit a year ago

Apt06202001 ⭐ 197

Applied Purple Teaming - (ITOCI4hr) - Infrastructure, Threat Optics, and Continuous Improvement - June 6, 2020

most recent commit 4 years ago

Tylium ⭐ 87

Primary data pipelines for intrusion detection, security analytics and threat hunting

most recent commit 2 years ago

Detection Sources ⭐ 43

most recent commit 5 years ago

Sysmonresources ⭐ 40

Consolidation of various resources related to Microsoft Sysmon & sample data/log

most recent commit 3 years ago

Elk Hunting ⭐ 39

Threat Hunting with ELK Workshop (InfoSecWorld 2017)

most recent commit 6 years ago

Threat Hunting ⭐ 34

This repo is dedicated to all my tricks, tweaks and modules for testing and hunting threats. This repo contains multiple directories which are in their own, different modules required for threat hunting. This repo will be updated as and when new changes are made.

most recent commit 6 years ago

App_splunk_sysmon_hunter ⭐ 33

Splunk App to assist Sysmon Threat Hunting

most recent commit 7 years ago

Suggest An Alternative To SysmonResources

Alternative Project Comparisons

Sysmonresources vs Sysmon Dfir

Sysmonresources vs Cyberthreathunting

Sysmonresources vs Grafiki

Sysmonresources vs Apt06202001

Sysmonresources vs Tylium

Sysmonresources vs Detection Sources

Sysmonresources vs Elk Hunting

Sysmonresources vs Threat Hunting

Sysmonresources vs App_splunk_sysmon_hunter

Popular Sysmon Projects

Sigma ⭐ 7,542

Main Sigma Rule Repository

dependent packages 2total releases 35latest release January 13, 2019most recent commit 7 days ago

Sysmon Config ⭐ 4,512

Sysmon configuration file template with default high-quality event tracing

most recent commit 2 months ago

Detectionlab ⭐ 4,486

Automate the creation of a lab environment complete with security tooling and logging best practices

most recent commit a year ago

Windowsspyblocker ⭐ 3,920

Block spying and tracking on Windows

most recent commit a year ago

Threathunter Playbook ⭐ 3,826

A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

most recent commit 2 months ago

Popular Threat Projects

Awesome Malware Analysis ⭐ 10,368

Defund the Police.

most recent commit 6 months ago

Wazuh ⭐ 8,176

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

most recent commit 3 months ago

Crowdsec ⭐ 7,468

CrowdSec - the open-source and participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.

dependent packages 13total releases 263latest release December 08, 2023most recent commit 3 months ago

Awesome Threat Intelligence ⭐ 6,905

A curated list of Awesome Threat Intelligence resources

most recent commit 3 months ago

Misp ⭐ 4,835

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

most recent commit 3 months ago

Popular Security Categories