Skip to content

@Cisco-Talos Cisco Talos

Change the repository type filter

All

    Repositories list

    77 repositories

    • IOCs

      Public
      Indicators of Compromise
      Python
      •44•282•4•4•Updated Aug 13, 2026Aug 13, 2026

    • EvidenceForge

      Public
      Generate realistic synthetic security logs for cybersecurity threat hunting training and research
      Python
      •
      MIT License
      •22•214•2•1•Updated Aug 13, 2026Aug 13, 2026

    • clamav

      Public
      ClamAV - Documentation is here: https://docs.clamav.net
      open-sourceclamavantivirus
      open-sourceclamavantivirusgplv2
      C
      •
      GNU General Public License v2.0
      •900•7.1k•325•48•Updated Aug 12, 2026Aug 12, 2026

    • clamav-mussels-cookbook

      Public
      11•16•4•1•Updated Aug 12, 2026Aug 12, 2026

    • Mussels

      Public
      Python
      •
      Apache License 2.0
      •16•58•20•1•Updated Aug 12, 2026Aug 12, 2026

    • PEAK

      Public
      Security Content for the PEAK Threat Hunting Framework
      Jupyter Notebook
      •
      Apache License 2.0
      •9•48•0•1•Updated Aug 9, 2026Aug 9, 2026

    • clamav-documentation

      Public
      ClamAV Documentation
      clamavclamav-documentation
      clamavclamav-documentation
      CSS
      •26•36•2•1•Updated Aug 7, 2026Aug 7, 2026

    • clamav-docker

      Public
      Dockerfiles for the ClamAV project
      Shell
      •29•54•19•5•Updated Aug 7, 2026Aug 7, 2026

    • DECEIVE

      Public
      DECeption with Evaluative Integrated Validation Engine (DECEIVE): Let an LLM do all the hard honeypot work!
      Python
      •
      MIT License
      •41•288•3•11•Updated Aug 5, 2026Aug 5, 2026

    • clamav-bytecode-compiler

      Public
      ClamAV Bytecode Compiler
      C
      •
      GNU General Public License v2.0
      •28•91•1•0•Updated Jul 30, 2026Jul 30, 2026

    • clamav-signature-util

      Public
      A tool and library for validating and dissecting ClamAV one-liner signatures
      Rust
      •
      GNU General Public License v2.0
      •1•2•0•1•Updated Jul 17, 2026Jul 17, 2026

    • razorback-sdk-c

      Public
      C
      •
      Other
      •0•0•0•1•Updated Jul 8, 2026Jul 8, 2026

    • cvdupdate

      Public
      ClamAV Private Database Mirror Updater Tool
      Python
      •
      Apache License 2.0
      •44•118•7•2•Updated Jun 5, 2026Jun 5, 2026

    • PEAK-Assistant

      Public
      An AI-backed threat hunting assistant that aligns to the PEAK framework.
      Python
      •
      MIT License
      •11•58•0•3•Updated Jun 1, 2026Jun 1, 2026

    • clamav-sys

      Public
      Rust
      •
      GNU General Public License v2.0
      •1•2•1•0•Updated May 5, 2026May 5, 2026

    • clamav-async-rs

      Public
      Rust
      •
      GNU General Public License v2.0
      •2•9•2•0•Updated May 5, 2026May 5, 2026

    • Other

      Public
      YARA
      •0•0•0•0•Updated Apr 2, 2026Apr 2, 2026

    • iDispatch_Logging

      Public
      THR Tooling
      C++
      •
      Other
      •0•1•0•0•Updated Mar 20, 2026Mar 20, 2026

    • Xfiletrator

      Public
      Python
      •
      Apache License 2.0
      •1•12•0•0•Updated Mar 17, 2026Mar 17, 2026

    • razorback-common-m4

      Public
      M4
      •
      Other
      •0•0•0•0•Updated Mar 13, 2026Mar 13, 2026

    • DBI

      Public
      DBI with DynamoRIO
      C
      •
      Other
      •1•4•0•0•Updated Oct 30, 2025Oct 30, 2025

    • catdoc-talos-fixes

      Public
      Catdoc with Talos fixes for CVE-2024-48877, CVE-2024-54028, CVE-2024-52035 and CVE-2024-42515
      C
      •
      GNU General Public License v2.0
      •4•0•0•0•Updated Jun 3, 2025Jun 3, 2025

    • mdbook-sitemap-generator

      Public
      Utility to generate a sitemap.xml file for an mdbook project
      Rust
      •
      MIT License
      •8•0•0•0•Updated Jan 24, 2025Jan 24, 2025

    • Windows-drivers-GDT-file

      Public
      Ghidra data type archive for Windows driver analysis
      5•30•0•0•Updated Oct 10, 2024Oct 10, 2024

    • osquery_queries

      Public
      Cisco Orbital - Osquery queries by Talos
      Other
      •33•137•0•0•Updated Aug 23, 2024Aug 23, 2024

    • libdesock

      Public
      A de-socketing library for fuzzing.
      C
      •
      MIT License
      •19•1•0•0•Updated Aug 15, 2024Aug 15, 2024

    • binary_function_similarity

      Public
      Jupyter Notebook
      •
      MIT License
      •39•314•11•15•Updated Jul 30, 2024Jul 30, 2024

    • HTML_Reversing_Cookbook

      Public
      A collection of CyberChef recipes for decoding and decrypting strings in HTML attachments
      MIT License
      •2•10•0•0•Updated Jul 10, 2024Jul 10, 2024

    • Re2Pcap

      Public
      Python
      •
      GNU General Public License v2.0
      •22•59•2•4•Updated Jun 28, 2024Jun 28, 2024

    • onenote.rs

      Public
      A Rust OneNote file parser (temporary fork for contributing to the upstream project)
      Rust
      •
      Mozilla Public License 2.0
      •22•1•0•0•Updated Jun 25, 2024Jun 25, 2024
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.