sweyntooth_bluetooth_low_energy_attacks

SweynTooth - Unleashing Mayhem over Bluetooth Low Energy This repository is part of a research outcome from theASSET Research Group. SweynTooth captures a family of 18 vulnerabilities across different Bluetooth Low Energy BLE software development kits SDKs of six major system-on-a-chip SoC vendor...

AiSOC

AiSOC An open-source, self-hostable AI Security Operations Center. It ingests your security telemetry, detects and correlates threats, investigates them with AI agents whose reasoning is fully auditable, and proposes responses a human approves. Technical Guide PDF · Docs · Architecture · What...

kodeblue

Hackers have agents that attack 24/7. Now you have one that defends. The simulation from problem99.io/kodeblue: one kodeblue per server, containing attacks as they land. An AI blue team for your Linux servers: SOC, incident response and SecOps in one. One kodeblue per server, running as its own...

soc-investigation-powershell-edrfreeze

PowerShell EDRFreeze Investigation LetsDefend Case Study This repository contains a documented SOC investigation based on a LetsDefend scenario involving suspicious PowerShell activity, a GitHub-hosted payload, and execution of the EDRFreeze tool. What this repository includes Full report:...

Overglade-Badges

Overglade Hackathon Badges These are zero-power hackathon badges I designed for the overglade hackathon in singapore! They're powered by the RP2040 and have passive NFC and an onboard e-ink driver! Custom Features Passive NFC tap for whatever your heart desires E-ink support so that you don't nee...

arya

Arya - The Reverse YARA Arya is a unique tool that produces pseudo-malicious files meant to trigger YARA rules. You can think of it like a reverse YARA because it does exactly the opposite - it creates files that matches your rules. You can read more about Arya and how it works in our blog. Intro...

Agentic-SOC-Simulation

🛡️ Agentic SOC Parallel Simulation ASPS: Autonomous Security Operations Parallel Simulation Center Redefining the Future of Security Operations: Full-Stack SOC Parallel Simulation, Multi-Agent Collaboration, and Data-Driven Autonomous Defense 🇨🇳 中文文档 Chinese Version This project is a cutting-edge...

fastfinder

FastFinder A lightweight incident response tool for threat hunting and forensic triage ✨ Overview FastFinder is a powerful, lightweight incident response tool designed for cybersecurity professionals conducting threat hunting, live forensics, and endpoint triage. Built for both Windows and Linux...

SecurityClaw

SecurityClaw — Autonomous SOC Agentic Framework A modular, skill-based autonomous Security Operations Center SOC agent that monitors OpenSearch/Elasticsearch data, builds RAG-based behavioral memory, and validates real-time anomalies using LLMs. Features Skill Modularity — Capabilities as isolate...

ShipProof

ShipProof SOC 2 evidence that collects itself in GitLab CI: every merge emits a signed bundle, an Open Policy Agent gate blocks releases with missing proof, and an auditor gets one packet link instead of screenshots. Live auditor dashboard · GitLab project · Demo evidence · Roadmap Why I built th...

awesome-lists

Security lists for SOC/DFIR detections 🐾 Threat Hunting: ThreatHunting keywords Site ThreatHunting keywords Lists ThreatHunting Yara rules ThreatHunting searches Windows Services Searches User-Agents Searches DNS Over HTTPS Searches Suspicious TLDs Searches HijackLibs Searches Phishing & DNSTWIST...

Quantum-Silicon-Core-Loader

Quantum Silicon Core Loader Primary Core: qslcl.asm v0.0.2 under development Assistant Module: qslcl.bin v0.7.4 Universal Controller: qslcl.py v2.2.2 Legally Protected Research - This project operates under established legal frameworks for security research, right to repair, and academic freedom...

soc-analyst-hub

🛡️ SOC Analyst Hub — Tier 1 Toolkit A free, fully offline interactive toolkit for Tier 1 SOC analysts — covering incident response, alert triage, threat hunting, and analyst onboarding. Zero dependencies. Single HTML file. Open in any browser. 🚀 Live Demo → 📦 What's Inside ⚡ Incident Response...

Purpleteam

Purpleteam work in progress Scripts i made to trigger events for SOC detections, mapped to MITRE ATT&CK techniques...

CVE-2026-48907-Joomla-JCE-detection

Joomla JCE CVE-2026-48907 — PoC Validation, Webshell Artifacts and SOC Detection Defensive validation report and SOC-oriented detection notes for CVE-2026-48907 affecting Joomla Content Editor JCE versions up to 2.9.99.4. Repository purpose This repository documents a controlled laboratory...

Bestechic BES2300 Bluetooth Audio SoC Buffer Overflow DoS

The vulnerability of the SBCDecodeFrames function in Bestechnic BES2300 Bluetooth Audio SoC microprogramming software is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failure...

Bestechic BES2300 Bluetooth Audio SoC Heap Buffer Overflow DoS

The vulnerability of the avrcpindicateprocessdataind function in the microprogramming-based audio chipset of Bestechnic BES2300 Bluetooth Audio SoC is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a specially crafte...

Bestechic BES2300 Bluetooth Audio SoC Buffer Overflow DoS

The vulnerability of the btmaclhandle function in Bestechnic BES2300 Bluetooth Audio SoC microprogramming software is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a specially crafted L2CAP packet...

Claude-Skills-Governance-Risk-and-Compliance

Claude Skills for Governance, Risk & Compliance GRC Expert-level compliance guidance for ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF, PCI DSS, TSA Cybersecurity, ISO 42001 AI Management System, ISO 27701 Privacy Information Management, DORA Digital Operational Resilience, India's Digital...

Playbooks

Table of Content TOC IR Playbooks This repository contains all the Incident Response Playbooks and Workflows of Company's SOC. Each folder contains a Playbook that is broken down into 6 section as per NIST - 800.61 r2 1- Preparation This section should include the following informations List of A...