Skip to content

@Cisco-Talos Cisco Talos

All

    Repositories list

    78 repositories

    • EvidenceForge

      Public
      Generate realistic synthetic security logs for cybersecurity threat hunting training and research
      Python
      •
      MIT License
      •28•267•2•3•Updated Sep 21, 2026Sep 21, 2026

    • talos-thr-lotvpn-research

      Public
      TypeScript
      •
      MIT License
      •0•0•0•3•Updated Sep 14, 2026Sep 14, 2026

    • clamav-signature-util

      Public
      A tool and library for validating and dissecting ClamAV one-liner signatures
      Rust
      •
      GNU General Public License v2.0
      •3•3•0•1•Updated Sep 11, 2026Sep 11, 2026

    • clamav-mussels-cookbook

      Public
      12•17•4•2•Updated Sep 10, 2026Sep 10, 2026

    • IOCs

      Public
      Indicators of Compromise
      Python
      •
      Creative Commons Zero v1.0 Universal
      •45•289•4•4•Updated Sep 9, 2026Sep 9, 2026

    • clamav

      Public
      ClamAV - Documentation is here: https://docs.clamav.net
      open-sourceclamavantivirus
      open-sourceclamavantivirusgplv2
      C
      •
      GNU General Public License v2.0
      •926•7.3k•332•64•Updated Aug 27, 2026Aug 27, 2026

    • DECEIVE

      Public
      DECeption with Evaluative Integrated Validation Engine (DECEIVE): Let an LLM do all the hard honeypot work!
      Python
      •
      MIT License
      •42•294•3•12•Updated Aug 27, 2026Aug 27, 2026

    • Mussels

      Public
      Python
      •
      Apache License 2.0
      •17•59•20•2•Updated Aug 13, 2026Aug 13, 2026

    • PEAK

      Public
      Security Content for the PEAK Threat Hunting Framework
      Jupyter Notebook
      •
      Apache License 2.0
      •10•51•0•1•Updated Aug 9, 2026Aug 9, 2026

    • clamav-documentation

      Public
      ClamAV Documentation
      clamavclamav-documentation
      clamavclamav-documentation
      CSS
      •29•38•2•1•Updated Aug 7, 2026Aug 7, 2026

    • clamav-docker

      Public
      Dockerfiles for the ClamAV project
      Shell
      •33•57•19•5•Updated Aug 7, 2026Aug 7, 2026

    • clamav-bytecode-compiler

      Public
      ClamAV Bytecode Compiler
      C
      •
      GNU General Public License v2.0
      •29•92•1•0•Updated Jul 30, 2026Jul 30, 2026

    • razorback-sdk-c

      Public
      C
      •
      Other
      •1•1•0•1•Updated Jul 8, 2026Jul 8, 2026

    • cvdupdate

      Public
      ClamAV Private Database Mirror Updater Tool
      Python
      •
      Apache License 2.0
      •46•122•7•2•Updated Jun 5, 2026Jun 5, 2026

    • PEAK-Assistant

      Public
      An AI-backed threat hunting assistant that aligns to the PEAK framework.
      Python
      •
      MIT License
      •12•62•0•3•Updated Jun 1, 2026Jun 1, 2026

    • clamav-sys

      Public
      Rust
      •
      GNU General Public License v2.0
      •3•4•1•0•Updated May 5, 2026May 5, 2026

    • clamav-async-rs

      Public
      Rust
      •
      GNU General Public License v2.0
      •4•11•2•0•Updated May 5, 2026May 5, 2026

    • Other

      Public
      YARA
      •0•1•0•0•Updated Apr 2, 2026Apr 2, 2026

    • iDispatch_Logging

      Public
      THR Tooling
      C++
      •
      Other
      •1•2•0•0•Updated Mar 20, 2026Mar 20, 2026

    • Xfiletrator

      Public
      Python
      •
      Apache License 2.0
      •2•13•0•0•Updated Mar 17, 2026Mar 17, 2026

    • razorback-common-m4

      Public
      M4
      •
      Other
      •0•1•0•0•Updated Mar 13, 2026Mar 13, 2026

    • DBI

      Public
      DBI with DynamoRIO
      C
      •
      Other
      •2•5•0•0•Updated Oct 30, 2025Oct 30, 2025

    • catdoc-talos-fixes

      Public
      Catdoc with Talos fixes for CVE-2024-48877, CVE-2024-54028, CVE-2024-52035 and CVE-2024-42515
      C
      •
      GNU General Public License v2.0
      •4•1•0•0•Updated Jun 3, 2025Jun 3, 2025

    • mdbook-sitemap-generator

      Public
      Utility to generate a sitemap.xml file for an mdbook project
      Rust
      •
      MIT License
      •10•1•0•0•Updated Jan 24, 2025Jan 24, 2025

    • Windows-drivers-GDT-file

      Public
      Ghidra data type archive for Windows driver analysis
      5•32•0•0•Updated Oct 10, 2024Oct 10, 2024

    • osquery_queries

      Public
      Cisco Orbital - Osquery queries by Talos
      Other
      •33•137•0•0•Updated Aug 23, 2024Aug 23, 2024

    • libdesock

      Public
      A de-socketing library for fuzzing.
      C
      •
      MIT License
      •20•2•0•0•Updated Aug 15, 2024Aug 15, 2024

    • binary_function_similarity

      Public
      Jupyter Notebook
      •
      MIT License
      •40•317•11•15•Updated Jul 30, 2024Jul 30, 2024

    • HTML_Reversing_Cookbook

      Public
      A collection of CyberChef recipes for decoding and decrypting strings in HTML attachments
      MIT License
      •2•12•0•0•Updated Jul 10, 2024Jul 10, 2024

    • Re2Pcap

      Public
      Python
      •
      GNU General Public License v2.0
      •22•60•2•4•Updated Jun 28, 2024Jun 28, 2024
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.