M00NLIG7/ChopChopGo

Rapidly Search and Hunt through Windows Forensic Artefacts

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

Cross-platform incident response and live forensics toolkit with built-in detection, structured analysis, and report generation — designed for fast, actionable security investigations.

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

用于Linux应急响应，快速排查异常用户登录情况和入侵信息排查，准确定位溯源时间线，高效辅助还原攻击链。

Collecting & Hunting for IOCs with gusto and style

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

A tool collection for filtering and visualizing logon events. Designed to help answering the "Cotton Eye Joe" question (Where did you come from where did you go) in Security Incidents and Threat Hunts

Production-ready detection & response queries for osquery