Blackhat 2025 presentation and codebase: AI SOC agent & MCP server for automated security investigation, alert triage, and incident response. Integrates with ELK, IRIS, and other platforms.
-
Updated
Dec 28, 2025 - Python
#
soc-tools
Here are 30 public repositories matching this topic...
🦅 ZeroScout: The Autonomous Local & Cloud Threat Hunter. Visualize attacks in a live War Room, identify APT groups via Genetic Analysis, and auto-generate defense rules (YARA/SIGMA). DFIR & Malware Analysis Framework.
python cli detection static-analysis incident-response dfir threat-hunting malware-analysis yara blue-team soc-tools sigma-rules ransomware-dectection war-rom
-
Updated
Dec 1, 2025 - Python
This tool runs scripts and display the result in a Web Interface.
security website webserver python3 devops-tools wsgi-server admin-tools script-executor security-tools devsecops pypi-package soc-tools environment-share scripts-share teams-tools
-
Updated
Jun 28, 2024 - Python
Real-time Layer 7 DDoS detection and HTTP traffic analysis tool designed to identify bot activity, anomalous requests, and application-layer attacks with high accuracy.
ddos traffic-analysis cybersecurity penetration-testing intrusion-detection application-security web-security network-security ddos-mitigation bot-detection layer7 ddos-protection security-tools http-security anomaly-detection security-tool soc-tools cybersecurity-tools http-monitoring layer7-attack
-
Updated
Jun 16, 2026 - Python
AI-Driven Malware Triage & Deep Swarm Inspection Platform
react nodejs express incident-response authenticode cybersecurity steganography malware-analysis digital-forensics yara virustotal multi-agent-systems threat-intelligence ai-agents incident-response-tooling soc-tools pe-analysis entropy-analysis
-
Updated
May 19, 2026 - JavaScript
Client-side AI log analysis engine. Detect volumetric brute-force threats and anomalous UA patterns locally, with zero server-side data ingestion.
-
Updated
Jun 4, 2026 - JavaScript
Lightweight Bash-based malware hash scanner for SOC analysts to detect known malware using SHA256 hash comparison.
macos bash incident-response cybersecurity infosec shell-script threat-hunting linux-security malware-detection blue-team soc-tools hash-based-detection
-
Updated
Jan 7, 2026 - Shell
TheHive Modified: a Scalable, Open Source and Free Security Incident Response Platform
-
Updated
Jul 6, 2018 - JavaScript
Command-line tool for detecting phishing emails in .eml files with rule-based analysis.
python phishing cybersecurity spam-detection eml threat-intelligence portfolio-project soc-tools email-analysis
-
Updated
Apr 20, 2025 - Python
Tactics and Techniques used by Iraninan APT groups for MITRE
cybersecurity threat-actors red-team threat-intelligence attack-defense security-research blue-team mitre-attack cyber-threat-intelligence soc-tools apt-groups apt-groups-and-operations attack-navigator
-
Updated
May 29, 2026 - Python
🛡️ Enhance network security with AEGIS-Ω, a hybrid intrusion detection system that combines signature and anomaly detection using advanced deep learning methods.
react python machine-learning deep-learning ids autoencoder network-security intrusion-detection-system anomaly-detection bilstm threat-detection sih soc-tools pcap-analysis ntro
-
Updated
Jul 19, 2026 - Python
SentinelEye is a lightweight, fully local SIEM that ingests large‑scale firewall, DNS, and authentication logs to detect security threats in real time. It provides SOC‑ready alerts, rich investigations, and a dark dashboard without relying on external cloud services.
-
Updated
Mar 20, 2026 - Python
This project is a Comprehensive Vulnerability Management and Software Catalog system Dashboard.
cybersecurity cve cve-scanning cyber-security cve-search soc-tools cyber-defense cves cve-management cve-dashboard
-
Updated
Sep 17, 2024 - HTML
Python-based phishing email analyzer with a web dashboard — detects spoofed headers, malicious URLs, brand impersonation, and IOCs with risk scoring 0-100
-
Updated
Apr 8, 2026 - HTML
AEGIS-Omega is a high-performance, hybrid multi-layer Intrusion Detection System (IDS). It features a 4-layer detection strategy—Signature Analysis, Autoencoder Anomaly Detection, BiLSTM Deep Learning, and Ensemble Fusion—to identify attack types with 95% F1-score. Includes a FastAPI backend, React dashboard, and PCAP,Netflow analysis.
react python machine-learning deep-learning ids autoencoder network-analysis network-security intrusion-detection-system anomaly-detection bilstm threat-detection sih soc-tools pcap-analysis ntro
-
Updated
Mar 29, 2026 - Python
A collection of projects for enterprise security operations
access-control vulnerability-management security-automation devsecops data-loss-prevention zerotrust security-operations soc-tools data-redaction com-automation
-
Updated
Dec 15, 2025 - PowerShell
Fast, SOC‑ready malicious document scanner that turns suspicious PDFs, DOC(X), XLS(X), and RTFs into IOC‑rich, SIEM‑friendly reports.
python cli ioc static-analysis cybersecurity malware-analysis threat-intelligence abuseipdb virus-total soc-tools pdf-analysis office-macros
-
Updated
Jul 2, 2026 - Python
Privacy-conscious security triage and evidence review for Windows and Linux.
network-forensics incident-response digital-forensics security-triage soc-tools endpoint-forensics evidence-analysis threat-investigation
-
Updated
Jul 14, 2026
This is a repository for SOC tools I have made. tools may be added over time, so keep checking back for updates!
-
Updated
Feb 26, 2026 - Python
JUMAL (Junior Malware Analyst) - AI-powered tool for malware triage
malware-analyzer malware-analysis malware-research virustotal infected-files malware-sample malware-detection malware-protection infected soc-tools virustotal-api soc-analyst soc-lab virustotal-api-integration
-
Updated
Mar 25, 2026 - Python
Improve this page
Add a description, image, and links to the soc-tools topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the soc-tools topic, visit your repo's landing page and select "manage topics."