threat-research

Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-model LLM orchestration.

Headless AI agent for deterministic reverse engineering.

Threat feeds designed to extract adversarial TTPs and IOCs, using: ✨AI✨

A public repository of quality research on cyber attack techniques. This is the backend for the Technique Research Report (TRR) Library.

An SSH metadata analyser used to showcase a timing-based attack on the protocol.

Curated list of APT group trackers, malware family indexes, naming maps, threat actor reporting, and public intelligence sources.

Repository of tools, YARA rules, and code-snippets from Stairwell's research team.

Scripts for importing threat feeds and CTI articles, blogs, and reports into MISP.

It provides a simple way to interact with the Odin API and access various services related to cybersecurity, certificates, and more

The Elastic Security Research team produces public-facing content, in the way of summary blogs, detailed releases, and artifacts; articulating both adversary campaign activities and threat detection steps that can be leveraged to frustrate adversary goals.

Advanced Living Off the Land (LotL) tactics, tools, and abuse techniques for red teams, defenders, and cyber researchers. Stealth over payload.

Source-only LSASS tooling analysis, AI-generated .NET research artifacts, and defensive detection coverage.

A privacy-first local OSINT workbench for investigating usernames, emails, domains, IPs, URLs, and other indicators through structured queries, cases, provenance, connectors, graphs, timelines, and community-driven providers.

Java 17 defensive-security workbench for synthetic mobile-threat emulation, detection engineering, analyst triage and local investigation reporting.

senhasegura Identity Threat Labs is a premier threat intelligence center specializing in predictive analysis of identity-focused attack vectors. Using reverse engineering, malware analysis, and threat intelligence, our lab identifies emerging threats and provides actionable reports to help organizations strengthen defenses and mitigate risks.

Hands-on detection engineering portfolio focused on behavior-based threat detection, EQL, and real-world attack analysis

Frontend for the TRR Library.

A set of API's to catalog sets of saved-searches for the purpose of contextualizing research efforts & results. Batteries not included.

Reverse engineering and runtime analysis of the PackClient modular RAT framework: Launcher and Core internals, protocol reconstruction, tooling, and detection engineering.