#

soc-tools

Here are 37 public repositories matching this topic...

M507 / AI-SOC-Agent

Blackhat 2025 presentation and codebase: AI SOC agent & MCP server for automated security investigation, alert triage, and incident response. Integrates with ELK, IRIS, and other platforms.

mcp incident-response self-hosted soc threat-intelligence ai-agents blue-team threat-detection purple-team security-operations soc-tools detection-engineering ai-agent soc-automation mcp-server ai-soc agentic-soc ai-soc-agent smart-soc

Updated Sep 30, 2026
Python

SUmidcyber / ZeroScout

🦅 ZeroScout: The Autonomous Local & Cloud Threat Hunter. Visualize attacks in a live War Room, identify APT groups via Genetic Analysis, and auto-generate defense rules (YARA/SIGMA). DFIR & Malware Analysis Framework.

python cli detection static-analysis incident-response dfir threat-hunting malware-analysis yara blue-team soc-tools sigma-rules ransomware-dectection war-rom

Updated Dec 1, 2025
Python

mauricelambert / WebScripts

This tool runs scripts and display the result in a Web Interface.

security website webserver python3 devops-tools wsgi-server admin-tools script-executor security-tools devsecops pypi-package soc-tools environment-share scripts-share teams-tools

Updated Jun 28, 2024
Python

GiTaDi-CrEaTe / zero-log

Client-side AI log analysis engine. Detect volumetric brute-force threats and anomalous UA patterns locally, with zero server-side data ingestion.

react log-analysis cybersecurity threat-hunting client-side privacy-first soc-tools

Updated Jun 4, 2026
JavaScript

mr-coder20 / L7-Resilience-Scanner

Real-time Layer 7 DDoS detection and HTTP traffic analysis tool designed to identify bot activity, anomalous requests, and application-layer attacks with high accuracy.

Updated Sep 29, 2026
Python

waris206 / ThreatLens

AI-Driven Malware Triage & Deep Swarm Inspection Platform

react nodejs express incident-response authenticode cybersecurity steganography malware-analysis digital-forensics yara virustotal multi-agent-systems threat-intelligence ai-agents incident-response-tooling soc-tools pe-analysis entropy-analysis

Updated May 19, 2026
JavaScript

mantrapatil03 / malware-hash-scanner

Lightweight Bash-based malware hash scanner for SOC analysts to detect known malware using SHA256 hash comparison.

macos bash incident-response cybersecurity infosec shell-script threat-hunting linux-security malware-detection blue-team soc-tools hash-based-detection

Updated Jan 7, 2026
Shell

Fad-X / MemScout

A memory forensics automation tool that wraps Volatility 3, runs plugins, detects suspicious activity (malicious processes, code injection, network anomalies), and generates professional reports from a single command. Supports Windows, Linux, and macOS.

automation incident-response dfir cybersecurity threat-hunting malware-analysis digital-forensics volatility forensic-analysis memory-forensics security-tools malware-detection blue-team threat-detection soc-tools volatility3 windows-forensics linux-forensics python-forensics

Updated Aug 18, 2026
Python

glazai / PhishyMail

Command-line tool for detecting phishing emails in .eml files with rule-based analysis.

python phishing cybersecurity spam-detection eml threat-intelligence portfolio-project soc-tools email-analysis

Updated Apr 20, 2025
Python

precize / iran-apt-mitre-attack-matrix

Tactics and Techniques used by Iraninan APT groups for MITRE

cybersecurity threat-actors red-team threat-intelligence attack-defense security-research blue-team mitre-attack cyber-threat-intelligence soc-tools apt-groups apt-groups-and-operations attack-navigator

Updated May 29, 2026
Python

Ajayace03 / aegis-omega-ids

AEGIS-Omega is a high-performance, hybrid multi-layer Intrusion Detection System (IDS). It features a 4-layer detection strategy—Signature Analysis, Autoencoder Anomaly Detection, BiLSTM Deep Learning, and Ensemble Fusion—to identify attack types with 95% F1-score. Includes a FastAPI backend, React dashboard, and PCAP,Netflow analysis.

react python machine-learning deep-learning ids autoencoder network-analysis network-security intrusion-detection-system anomaly-detection bilstm threat-detection sih soc-tools pcap-analysis ntro

Updated Mar 29, 2026
Python

NextSecurity / TheHive

TheHive Modified: a Scalable, Open Source and Free Security Incident Response Platform

thehive nextsecurity thehive-project thehive-modified soc-tools

Updated Jul 6, 2018
JavaScript

dasnija / aegis-omega-ids

🛡️ Enhance network security with AEGIS-Ω, a hybrid intrusion detection system that combines signature and anomaly detection using advanced deep learning methods.

react python machine-learning deep-learning ids autoencoder network-security intrusion-detection-system anomaly-detection bilstm threat-detection sih soc-tools pcap-analysis ntro

Updated Oct 14, 2026
Python

010011110010110101011010 / CVE-Mangement-Tool

This project is a Comprehensive Vulnerability Management and Software Catalog system Dashboard.

cybersecurity cve cve-scanning cyber-security cve-search soc-tools cyber-defense cves cve-management cve-dashboard

Updated Sep 17, 2024
HTML

md-washue / py_cpp_ip_validator

A cross-language desktop application featuring a Python Tkinter UI bridged to a high-performance C++ backend for strict IPv4 and IPv6 network validation.

python networking cpp python3 cybersecurity cross-language ip-validator soc-tools thinkter

Updated Aug 11, 2026
Python

KIRAN-KUMAR-K3 / SentinelEye

SentinelEye is a lightweight, fully local SIEM that ingests large‑scale firewall, DNS, and authentication logs to detect security threats in real time. It provides SOC‑ready alerts, rich investigations, and a dark dashboard without relying on external cloud services.

flask threat-hunting siem network-security soc-tools cybersecurity-tools log-ingestion

Updated Mar 20, 2026
Python

Nyanites / tidewatch

Windows Event Viewer for Mac: open, search and threat-hunt .evtx event logs natively on macOS. Fast EVTX parser with built-in detections and Sigma rules. Windows version coming soon.

Updated Oct 18, 2026
Rust

Lovedipsingh / Phishing-Detector

Python-based phishing email analyzer with a web dashboard — detects spoofed headers, malicious URLs, brand impersonation, and IOCs with risk scoring 0-100

python flask cybersecurity email-security threat-analysis phishing-detection soc-tools

Updated Apr 8, 2026
HTML

SufiyanAasim / smart-network-intrusion-detection-system

Smart Network Intrusion Detection System (S-NIDS) — A multi-model network intrusion detection, consensus triage, and policy-governed autonomous defense workspace.

machine-learning-algorithms network-monitoring nids decision-tree-classifier network-security intrusion-detection-system isolation-forest-algorithm random-forest-classifier soc-tools pcap-analysis threat-hunting-dashboard incident-response-tool autonomous-response

Updated Oct 26, 2026
Python

youmahmy / security-automation-portfolio

A collection of projects for enterprise security operations

access-control vulnerability-management security-automation devsecops data-loss-prevention zerotrust security-operations soc-tools data-redaction com-automation

Updated Dec 15, 2025
PowerShell

Add this topic to your repo

To associate your repository with the soc-tools topic, visit your repo's landing page and select "manage topics."