Security Automation
Showing 36 of 76 projects
A PowerShell script for live forensic data acquisition and endpoint lockdown during Windows incident response.
A security tool for AWS that enforces resource ownership, detects domain hijacking, and verifies security services.
A browser extension that streamlines security investigations by providing quick lookups for IPs, domains, hashes, and other indicators.
A command-line interface for HashiCorp Vault that simplifies secret generation, management, and secure credential handling.
A modified fork of Cuckoo Sandbox with enhanced malware analysis capabilities, improved stability, and additional features.
A web-based platform for organizing, automating, and analyzing password cracking tasks using Hashcat.
A Python RESTful API framework for querying multiple online malware analysis and threat intelligence services.
Import 28+ threat intelligence feeds into CrowdSec with automatic deduplication, normalization, and real-time sync.
A curated reference hub of tools and real-world examples for designing effective threat detection and response pipelines.
A modular, recursive file scanning framework that extends Yara signatures to extract and analyze file objects for malware analysis and intelligence.
A PowerShell module for remote endpoint threat hunting, scanning for indicators of compromise and collecting system state information.
A modular Python tool that collects threat intelligence for hosts (IPs, domains, FQDNs) from multiple sources and outputs CSV data.
A framework for automating offensive security testing by scripting security tool APIs like Empire and Metasploit.
A deprecated threat intelligence platform for collecting, processing, and sharing security indicators.
Python library for creating, editing, and managing OpenIOC objects for threat intelligence indicators.
A Go library for parsing and manipulating Snort and Suricata IDS/IPS rules with Suricata compatibility focus.
SpiderFoot is an open-source intelligence (OSINT) automation platform that integrates with 309+ data sources for threat intelligence and attack surface mapping.
A framework for analyzing and defending against supply chain attacks targeting Software Development Lifecycle infrastructure.
An Active Defense PowerShell framework for detecting and responding to phishing attacks in Office 365 environments.
An open-source malware analysis pipeline system that automates sample collection, processing, and JSON-based artifact storage.
A unified console for digital forensics and incident response built on the Viper Framework.
A Python wrapper for Hashcat that automates password cracking workflows with wordlist management and brute-force attacks.
A PowerShell module for interacting with VirusTotal's API to analyze suspicious files, URLs, domains, and IP addresses.
A modular malware and IOC ingestion framework that collects, enriches, and exports threat intelligence from multiple feeds.
A toolkit for analyzing credential phishing sites by automating screenshot capture, file scraping, form interaction, and PDF URL extraction.
Automated script to install and configure Dionaea and Kippo honeypots as system services on Ubuntu.
A modular web application honeypot framework written in Go and Gin for detecting web attacks through deceptive applications.
A CLI program for automating the deployment, configuration, and monitoring of cybersecurity solutions across multiple hosts.
A PowerShell module for targeted containment and remediation during incident response, enabling remote cleanup of malware artifacts.
Synchronizes threat intelligence indicators from MISP to Suricata datasets and sends alert sightings back to MISP.
A pure Python parser and generator for Snort and Suricata intrusion detection rules.
A Terraform provider for managing Signal Sciences web application firewall and security monitoring resources.
A Python library for interfacing with the cuckoo-modified malware sandbox via its API.
Zsh plugin providing shortcuts for Metasploit Framework payload generation and Python HTTP server setup.
A collection of open-source threat detection rules for Snort, Sigma, and Yara security tools.
A Go client library for interacting with Suricata's Unix socket to execute commands and retrieve data.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.