cyber-defense

Agentic AI EDR for developer workstations and autonomous agent swarms. Build Swarm Detection & Response platforms with Clawdstrike.

A cybersecurity game in Azure Data Explorer

Comprehensive SOC Analyst notes covering incident response, threat hunting, SOC workflows, and cybersecurity concepts—perfect for exam prep and skill-building in blue team operations.

Sensor Mappings to ATT&CK is a collection of resources to assist cyber defenders with understanding which sensors and events can help detect real-world adversary behaviors in their environments.

Self-hosted PCAP analysis platform with LLM-powered incident triage, signature-based threat detection, and AI-generated incident narratives. Features network change monitoring across captures, deep packet inspection via nDPI, and automated Wireshark filter generation. Runs fully offline with local LLMs (Ollama, LM Studio).

Highly customizable low-interaction experimental honeypot that mimics specific hosts.

Harnessing AI to Disrupt and Evaluate Security (HADES)

CLI-based 802.11 Rogue (Fake) AP & Hidden AP Spotter

هذا المشروع يحتوي على جميع الدروس والموارد لكورس تعلم الأمن السيبراني من إعداد Coder Shiyar. مناسب للمبتدئين ومن يريدون تحسين مهاراتهم في الأمن السيبراني، اختبار الاختراق، أمان الشبكات، وتقنيات الحماية الأخلاقية.

This repo is all about Blue teamming and CyberDefenders Write-up for their DFIR challenges

Digital forensic (DFIR) specialist roadmap.

An Attentive Graph Agent for Topology-Adaptive Cyber Defence

Production-validated detection queries and hunting artifacts across 9 platforms (KQL, Sigma, Splunk, Athena, PowerShell, Velociraptor, YARA, Suricata, osquery). Each with triggers, false positives, tuning guidance, and validation steps.

"Dead1ock-h4ck" is an open-source project dedicated to exploring cybersecurity and ethical hacking techniques. The project aims to provide resources and tools for learning about network security, cryptography, and penetration testing.

Hybrid LSTM-Markov attack chain forecasting for MITRE ATT&CK. Learns from 4,849 campaign chains + 8,437 real intrusion traces. Generates 26,051 risk-ranked multi-step attack futures via constrained beam search. 86% next-step accuracy, 0.76 Pearson correlation with NCISS severity. SECRYPT 2026 submission.

☮︎ ▪︎ hackherway cyberepo ▪︎ learn how to hackherway ▪︎ the hacker way ▪︎ ☮︎

Proactive AI-driven cyber-physical escalation-aware defense — doctrinal architecture for U.S. cyber defense at machine speed.

OpenMTD - A framework for efficient MTD evaluation

I use this repo as a backup of my notes. knowledge is free and meant to be shared. feel free to use it at your own wish :)

AI-powered cybersecurity monitoring platform that detects suspicious digital attacks, analyzes threat patterns, visualizes intrusion risks, and assists in proactive cyber defense management.