从 65,705 个高星开源项目里，
找到你要的下一个。

my-arsenal-of-aws-security-tools 是用 Shell 编写的运维工具，用于部署、编排与监控，主打注重安全、开源免费。

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

awesome-incident-response 是一个资源清单，按主题汇总同类优质资源。

A curated list of tools for incident response

LOLBAS 是用 XSLT 编写的开源项目，主题标签有限，建议打开仓库查看具体用途。

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

zeek 是用 C++ 编写的运维工具，用于部署、编排与监控，主打功能完整。

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

awesome-forensics 是一个资源清单，按主题汇总同类优质资源。

⭐️ A curated list of awesome forensic analysis tools and resources

DetectionLab 是用 HTML 编写的安全工具，面向安全研究与防护，主打注重安全。

Automate the creation of a lab environment complete with security tooling and logging best practices

IntelOwl 是用 Python 编写的安全工具，面向安全研究与防护。

IntelOwl: manage your Threat Intelligence at scale

ThreatHunter-Playbook 是用 Python 编写的学习资料，用于系统学习与查阅，主打开源免费。

A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

TheHive 是用 Scala 编写的开发框架，用于搭建服务端与接口，主打可伸缩。

TheHive is a Collaborative Case Management Platform, now distributed as a commercial version

Loki 是用 Python 编写的开源项目，主题标签有限，建议打开仓库查看具体用途，主打易用。

Loki - Simple IOC and YARA Scanner

chainsaw 是用 Rust 编写的安全工具，面向安全研究与防护。

Rapidly Search and Hunt through Windows Forensic Artefacts

timesketch 是用 Python 编写的安全工具，面向安全研究与防护。

Collaborative forensic timeline analysis

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

LogonTracer 是用 Python 编写的安全工具，面向安全研究与防护。

Investigate malicious Windows logon by visualizing and analyzing Windows event log

Digital-Forensics-Guide 是用 Python 编写的安全工具，面向安全研究与防护。

Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.

sysmon-modular 是用 Go 编写的安全工具，面向安全研究与防护。

A repository of sysmon configuration modules

security-onion 是一个运维工具，用于部署、编排与监控，主打注重安全、适合生产环境。

Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management

signature-base 是用 YARA 编写的实用工具，用于解决具体场景问题。

YARA signature and IOC database for my scanners and tools

EVTX-ATTACK-SAMPLES 是用 HTML 编写的安全工具，面向安全研究与防护。

Windows Events Attack Samples

cyberchef-recipes 是一个安全工具，面向安全研究与防护。

A list of cyber-chef recipes and curated links

yeti 是用 Python 编写的 AI 工具，用于人工智能方向的建模与推理。

Your Everyday Threat Intelligence

awesome-lists 是用 YARA 编写的实用工具，用于提升日常效率，主打注重安全。

Awesome Security lists for SOC/CERT/CTI

MemLabs 是用 Shell 编写的安全工具，面向安全研究与防护。

Educational, CTF-styled labs for individuals interested in Memory Forensics

awesome-soc 是一个安全工具，面向安全研究与防护。

A curated knowledge base to build, run and mature a SOC (including CSIRT).