Back to rankings

0x783kb / Threat-Analysis-Handbook

Common attack behavior monitoring characteristics and methods, covering endpoints and traffic, excluding PowerShell and Sysmon. Wishing you a pleasant operation!

Repository stars
654All-time #52,304
Fork
144
Last push
updated 15 days ago
Repository created
since 2019
Apps & systemsGeneralLicense not declared
View source

About

Original · GitHub
常见的攻击行为监测特征及方法,涵盖端点和流量,未包含PowerShell和Sysmon。预祝运营生活愉快!

Summarised by AI from the README; the original prevails

Author description: Common attack behavior monitoring characteristics and methods, covering endpoints and traffic, excluding PowerShell and Sysmon. Wishing you a pleasant operation!

Basic listing based on official public information; functionality has not been independently evaluated.

Check before adopting

  • No license declared: commercial use and redistribution terms are unknown.
Pricing
Pricing not verifiedCheck current official software, hosting, model and infrastructure pricing.

Star trend

65465565511-06 · 65410-0810-1310-1810-2310-2811-0211-06

First collected 2026-11-06Measured at 2026-11-06 07:45 UTCSource

Compiled from public project information; not independently tested. · Repository Stars, not unique users · License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.