Topics / #threat-hunting
Threat-hunting projects on GitHub
Proactive searching for attacker activity in environments
As of , the most-starred Threat-hunting projects on GitHub are Anthropic-Cybersecurity-Skills (34.6K stars), awesome-osint (30.3K stars) and sigma (11.3K stars). GitHub.Locker tracks 5 Threat-hunting repositories with 87.2K stars combined. The fastest-growing on October 17 was Anthropic-Cybersecurity-Skills, with +43 stars in a day.
Hot right now
Most stars gained in a day · Oct 17
+43Anthropic-Cybersecurity-Skills
mukul975/Anthropic-Cybersecurity-Skills · ★ 34.6KAn open-source library of 818 production-grade cybersecurity skills for AI agents, covering 34 security domains and mapped to six frameworks including MITRE ATT&CK and NIST CSF 2.0.
+31awesome-osint
jivoi/awesome-osint · ★ 30.3KThis is a curated 'awesome list' of hundreds of free and paid OSINT (open source intelligence) tools and resources, organized into categories like general search, Google dorks, data breach lookup, social media, threat actors, and dark web.
+8sigma
SigmaHQ/sigma · ★ 11.3KSigma is a generic, open signature format for describing detection patterns in log events, and this repository is the main collection of over 3000 community-written Sigma detection rules for SIEM systems.
+4awesome-threat-intelligence
hslatman/awesome-threat-intelligence · ★ 10.7KA curated catalog of threat intelligence resources — feeds, tools, frameworks, standards and research for tracking online threats. It is a pointer list on GitHub, not software you install.
The all-time top
5 projects · by stars
- 34.6K
#1 · mukul975/Anthropic-Cybersecurity-SkillsAnthropic-Cybersecurity-Skills
An open-source library of 818 production-grade cybersecurity skills for AI agents, covering 34 security domains and mapped to six frameworks including MITRE ATT&CK and NIST CSF 2.0.
- 30.3K
#2 · jivoi/awesome-osintawesome-osint
This is a curated 'awesome list' of hundreds of free and paid OSINT (open source intelligence) tools and resources, organized into categories like general search, Google dorks, data breach lookup, social media, threat actors, and dark web.
- 11.3K
#3 · SigmaHQ/sigmasigma
Sigma is a generic, open signature format for describing detection patterns in log events, and this repository is the main collection of over 3000 community-written Sigma detection rules for SIEM systems.
- 4

awesome-threat-intelligence
10.7Khslatman/awesome-threat-intelligenceA curated catalog of threat intelligence resources — feeds, tools, frameworks, standards and research for tracking online threats. It is a pointer list on GitHub, not software you install.
- 5

cynative
223cynative/cynative · GoCynative is an open-source AI agent framework that gives LLMs live, read-only access to your AWS, Azure, GCP, Kubernetes, GitHub and GitLab infrastructure so you can ask security questions and run cloud security posture and detection checks.
Related topics
Often tagged together
- cybersecurity245
- security977
- infosec47
- security-tools281
- threat-intelligence22
- curated-list634
- list540
- markdown551
- network-security66
- open-source5,667
- osint69
- resources706
- ai-agents1,298
- ai-security45
- apache-2.01,434
- application-security18
- awesome-list498
- cloud-security6
- container-security5
- devsecops38
- linux4,182
- llm1,489
- macos3,545
- malware-analysis34