All tags
Catalogue tag

#blue-team

Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.

9 records
Tagged “blue-team”Ranked by health index
PyPI · Go · npm
89Excellenthealth index
beenuar/AiSOC
Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.
Python · TypeScript★ 2,596↓ 94/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
crates.io
84Excellenthealth index
Karib0u/rustinel
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
Rust★ 485Sep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI
78Goodhealth index
depalmar/ai_for_the_win
Build AI-powered security tools. 50+ hands-on labs covering ML, LLMs, RAG, threat detection, DFIR, and red teaming. Includes Colab notebooks, Docker environment, and CTF challenges.
Python · Jupyter Notebook★ 160Sep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
PyPI
77Goodhealth index
msaleme/red-team-blue-team-agent-fabric
AI agent security harness, adversarial testing: 623 executable tests in the v4.21.3 release, across MCP, A2A, x402/L402, decision governance, benchmark integrity, human-in-the-loop, skill supply chain. Four target shapes: a verdict must be able to be wrong AND to be right. OWASP Agentic v1.1 T1-T17, AIUC-1 19/20 (2026-Q1/Q2 set), NIST AI 800-2.
Python★ 30↓ 1,542/moSep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
Go
75Goodhealth index
edoardottt/boggart
Highly customizable low-interaction experimental honeypot that mimics specific hosts.
Go · HTML★ 38Sep 14, 2026
GPL-3.0Sep 14, 2026 · metrics 2.10.0
Go
67Goodhealth index
Ashfaaq98/ocsf-console-ir
Console-IR. OCSF-native incident response and investigation TUI for the terminal. Triage findings, pivot on indicators, investigate hosts and accounts, GeoIP and WHOIS enrichment, case management, write the report. Single Go binary, SQLite, no server. Open Cybersecurity Schema Framework security tooling for SOC analysts and DFIR.
Go★ 5Sep 19, 2026
AGPL-3.0Sep 19, 2026 · metrics 2.10.0
Go
48Weakhealth index
ridgelinecyberdefence/vanguard
Cross-platform incident response toolkit. 28 pre-built use cases in a single zero-install binary: triage, threat hunting, memory forensics, disk collection, remote operations, and Velociraptor management. Works air-gapped, with automated timeline generation.
Go · HTML★ 154Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
PyPI
42Weakhealth index
osintph/falconeye
Free self-hosted OSINT investigator's toolkit. Sixteen investigation tools in one interface: crypto tracing, phishing fingerprinting, domain intel, Telegram OSINT, IP reputation, email header forensics with LLM scam detection, username enumeration, HIBP breach checks, ransomware victim tracking. AGPL-3.0.
Python · JavaScript★ 13Sep 17, 2026
AGPL-3.0Sep 17, 2026 · metrics 2.10.0
Go
33At Riskhealth index
joda32/yowie
Finds the SaaS services an organisation subscribes to, using only externally observable data. Built for shadow IT discovery.
Go★ 1Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0