Alternatives
Compare similar skills by workflow fit, trust score, quality, GitHub adoption, maintenance, and install readiness.
Current skill
Threat Hunting query in Microsoft 365 Defender, XDR. Provide out-of-the-box KQL hunting queries - App, Email, Identity and Endpoint.
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
$ npx skills add sleuthkit/sleuthkitPagerDuty's Incident Response Documentation.
$ npx skills add PagerDuty/incident-response-docsA collection of resources for Threat Hunters
$ npx skills add A3sal0n/CyberThreatHuntingSet of Mindmaps providing a detailed overview of the different #Microsoft auditing capacities for Windows, Exchange, Azure,...
$ npx skills add mdecrevoisier/Microsoft-eventlog-mindmapFAME Automates Malware Evaluation
$ npx skills add certsocietegenerale/fameList of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
$ npx skills add toniblyx/my-arsenal-of-aws-security-tools⚡️ Catalyst is a self-hosted, open source incident response platform and ticket system that helps to automate alert handling and incident response processes
$ npx skills add SecurityBrewery/catalystA collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID
$ npx skills add LETHAL-FORENSICS/Microsoft-Analyzer-SuitePowerShell Digital Forensics & Incident Response Scripts.
$ npx skills add Bert-JanP/Incident-Response-PowershellHayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
$ npx skills add Yamato-Security/hayabusaAPT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
$ npx skills add ahmedkhlief/APT-HunterVolatility 3.0 development
$ npx skills add volatilityfoundation/volatility3Digging Deeper....
$ npx skills add Velocidex/velociraptorForensics artefact collection tool for systems running Microsoft Windows
$ npx skills add DFIR-ORC/dfir-orcMemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR
$ npx skills add LETHAL-FORENSICS/MemProcFS-AnalyzerOpen-source cross-platform endpoint detection engine for Windows, macOS, and Linux using ETW, ESF, eBPF, Sigma, YARA, IOCs, and ECS NDJSON alerts.
$ npx skills add Karib0u/rustinelHow to choose
Use an alternative when it has a clearer install path, higher trust score, fresher maintenance, or better platform fit for your current agent stack. Keep KQL if it already passes your workflow test and repository review.
Next step
Open the compare page, test the install commands in a sandbox, and check each repository before using a skill in production.