sqhunter
Threat hunter based on osquery and Salt Open (SaltStack) that can issue ad-hoc or distributed queries without the need for osquery's tls plugin. sqhunter allows you to query open network sockets and check them against threat intelligence sources.
- from
- Incident Response
- added
- 2026-10-10
- likes
- 0
similar
-
APT Hunter github.com
APT-Hunter is Threat Hunting tool for windows event logs.
-
SELKS github.com
A Suricata-based intrusion detection system/intrusion prevention system/network security monitoring distribution.
-
RedHunt-OS github.com
Virtual machine for adversary emulation and threat hunting.
-
osquery github.com
SQL powered operating system instrumentation, monitoring, and analytics.
-
osquery github.com
-
HQL for pentesters blog.h3xstream.com
Incident Response › IR Tools Collection > Other Tools: “Threat hunter based on osquery and Salt Open (SaltStack) that can issue ad-hoc or distributed queries without the need for osquery's tls plugin. sqhunter allows you to query open network sockets and check them against threat intelligence sources.”