Pinned Loading

1. vigilant-api vigilant-api Public

   Black-box API security scanner - reads OpenAPI 3.x specs and tests live REST APIs for BOLA/IDOR, SSRF, OAuth, and JWT flaws.

   Python

2. soc-automation-lab soc-automation-lab Public

   End-to-end SOC automation lab: Wazuh detection engineering (12 MITRE-mapped rules + 11 Sigma), n8n SOAR triage with VirusTotal enrichment, gated auto-containment, Velociraptor DFIR validation, and …

   Python

3. NetTrace NetTrace Public

   Offline malware traffic analysis platform in Python. Parses PCAPs, extracts DNS/HTTP/TLS artifacts and IOCs, detects beaconing and DGA domains, maps MITRE ATT&CK, and exports JSON/HTML/PDF reports.

   Python

4. MalForge MalForge Public

   Local sandbox-report to detection-rule pipeline in Python. Parses Cuckoo, CAPE, and ANY.RUN JSON, extracts behaviors and IOCs, maps MITRE ATT&CK, generates Sigma rules, converts them to Wazuh XML w…

   Python

5. detfuzz detfuzz Public

   Evidence-backed detection resilience testing for PowerShell and Sigma rules using safe mutations, Sysmon telemetry, deterministic classification, and reproducible reports.

   Python

6. signalbudget signalbudget Public

   Cost-aware security telemetry planning. Builds a Pareto frontier over monthly ingest cost, hash-verified detection coverage, and investigation utility for three Windows log sources. Zero runtime deps.

   Python