mthcht/awesome-lists resource

Health v2 · maintenance only

Adoption not part of the score

1892 stars · 235 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A curated collection of security detection lists and resources for SOC, CERT, and CTI teams, including suspicious TLDs, ASNs, named pipes, Windows services, and threat hunting keywords. It aggregates continuously updated CSV lists, YARA rules, and hunting guides for building SIEM detections.

Use cases

• find lists of suspicious TLDs and ASNs for SIEM detections
• threat hunt for suspicious Windows services and named pipes
• get YARA rules for threat hunting keywords
• build detection rules for phishing and C2 activity
• curated security resources for SOC and DFIR teams
• detect ransomware and hacktool activity in logs

When to choose

• you are a SOC analyst or detection engineer needing curated indicator lists
• you want continuously updated suspicious TLD, ASN, and service name lists
• you need threat hunting keywords and YARA rules for purple teaming

When to avoid

• you need a runnable detection engine rather than reference lists
• you want automated SIEM integration out of the box

Facets

dataset · maturity active

security monitoring search-engine security awesome-lists self-hosted cross-platform soc dfir cti siem threat-hunting ioc detection-engineering yara incident-response redteam blueteam threat-intelligence

Member repositories

For agents

markdown · JSON · MCP: product_card(name="mthcht/awesome-lists")