Tools
SysmonTools
nshalabi/SysmonTools
A desktop toolkit for security analysts that imports, correlates, and visualizes Microsoft Sysmon logs. It offers interactive process-session diagrams, geo maps, event search, and VirusTotal lookups for threat hunting and DFIR.
Topics
Related projects
MISP6.6kAn open-source threat intelligence sharing platform for collecting, storing, correlating, and distributing cybersecurity indicators and events. It supports STIX exchange, granular sharing groups, and integrations with SIEM and IDS tooling.
WindowsSpyBlocker5.2kWindowsSpyBlocker is a single-executable Go application that blocks Windows telemetry and tracking. It captures and analyses network traffic, then generates firewall, hosts and DNS rules.
sigma11.5kThe main Sigma rule repository, offering thousands of vendor-agnostic detection rules convertible to many SIEM query languages.
Microsoft-Activation-Scripts198.3kOpen-source activation scripts for Windows and Office offering HWID, Ohook, TSforge, and online KMS methods plus troubleshooting guidance.
clash-verge-rev157.4kA Tauri-based Clash Meta GUI client with the mihomo core, subscription management, TUN mode, and visual proxy and rule editing.
PowerToys140.6kMicrosoft's collection of Windows productivity utilities, including FancyZones, PowerRename, Command Palette, Color Picker, and more than 30 tools.