A simple python script that generate platform-specific queries (e.g., AQL, Elasticsearch, Defender) from input lists of IP addresses, domain names, or file hashes to identify first point of contact.
A cross-platform desktop GUI tool that helps security analysts build and customize threat hunting queries for platforms like Qradar, Elastic and Defender.
This tool helps analysts quickly identify rules related to a particular service (e.g., Apache Kylin, MySQL) by scanning the msg field in alert definitions in rule sets for intrusion detection systems like Suricata and Snort.
Enumerating DWR-methods leading to information disclosure
Automate Your Way into the Attack Surface.
Generate platform-specific queries (QRadar, Elastic, Defender) from IPs, domains, or hashes to speed up your threat hunting workflow.
