Network Defender, developer, speaker, writer, author of O'Reilly's Intelligence Driven Incident Response, & SANS instructor. Bad guy catcher.
awesome-iocs. A collection of sources of indicators of compromise.
986cacador. Indicator Extractor
141malwarehouse. A warehouse for your malware
137jager. Hunting IOCs all day every day...
88threat-intel-templates. A set of templates for documenting threat intelligence
75hubot-vtr-scripts. Scripts for making Hubot a CND Sidekick
59sroberts.github.io. A landing page for great justice
21sapho. A homebrewed cyber threat intelligence solution
20responding-at-scale-with-osquery. Using osquery for Mass Incident Detection & Response
19wordlists. Groups of words that come in handy
12incident-template. An investigation template for tracking badness
7hubot-vtr-rhodey. Helper service for Hubot-VTR
6plumbline. Repo-level AI coding readiness assessment, in Go. Maps a repository to its level on the AI Codebase Maturity Model (ACMM).
6awesome-incident-response. A curated list of tools for incident response
5the-most-dangerous-game. HTML
4awesome. :sunglasses: Curated list of awesome lists
3transforms. Random open source maltego transforms
3guhor.
3talk-llm-sats-ftw-code. A collection of experiments exploring Large Language Models (LLMs) and their performance on SAT-style tasks, powered by Streamlit & OpenAI.
3talk-llm-sats-ftw. A talk on using LLMs for Structure Analytic Techniques
2synapse. Synapse Central Intelligence System
2extremist-files. JSON and CSV for Southern Poverty Law Center's Hate Map
2gobig. A command-line tool to generate big.js presentations from Markdown files
2mac. 👨💻 Here is how @sizovs sets up his Macbook
1cai5200-presentation.
1ssdeep-swift. Swift
1