#1
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
3.2K starsJun 7, 2026 pushdevopsRustIncident Response
$ npx skills add Yamato-Security/hayabusaAlternatives
Osquery Configuration alternatives for AI agents.
Compare similar skills by workflow fit, trust score, quality, GitHub adoption, maintenance, and install readiness.
Current skill
Osquery Configuration
A repository for using osquery for incident detection and response
64
Quality
77
Trust
895
Stars
#2
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
3.1K starsJun 12, 2026 pushdevopsCIncident Response
$ npx skills add sleuthkit/sleuthkit#3
PagerDuty's Incident Response Documentation.
1.0K starsApr 9, 2026 pushdevopsDockerfileIncident Response
$ npx skills add PagerDuty/incident-response-docs#4
Set of Mindmaps providing a detailed overview of the different #Microsoft auditing capacities for Windows, Exchange, Azure,...
1.1K starsNov 8, 2025 pushdevopsIncident ResponseClaude Code
$ npx skills add mdecrevoisier/Microsoft-eventlog-mindmap#5
FAME Automates Malware Evaluation
941 starsJun 13, 2026 pushdevopsPythonIncident Response
$ npx skills add certsocietegenerale/fame#6
List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
9.5K starsApr 17, 2026 pushdevopsShellIncident Response
$ npx skills add toniblyx/my-arsenal-of-aws-security-tools#7
⚡️ Catalyst is a self-hosted, open source incident response platform and ticket system that helps to automate alert handling and incident response processes
530 starsJun 2, 2026 pushdevopsVueIncident Response
$ npx skills add SecurityBrewery/catalyst#8
Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP, FISMA, etc.), Frameworks, Threat Models, Encryption, and Benchmarks.
1.1K starsJun 27, 2025 pushdevopsGoIncident Response
$ npx skills add mikeroyal/Open-Source-Security-Guide#9
A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID
634 starsJun 3, 2026 pushdevopsPowerShellIncident Response
$ npx skills add LETHAL-FORENSICS/Microsoft-Analyzer-Suite#10
PowerShell Digital Forensics & Incident Response Scripts.
797 starsMay 26, 2026 pushdevopsPowerShellIncident Response
$ npx skills add Bert-JanP/Incident-Response-Powershell#11
Fast and efficient osquery management
503 starsJun 14, 2026 pushdevopsGoIncident Response
$ npx skills add jmpsec/osctrl#12
Volatility 3.0 development
4.2K starsMay 26, 2026 pushdevopsPythonIncident Response
$ npx skills add volatilityfoundation/volatility3#13
Digging Deeper....
4.0K starsJun 16, 2026 pushdevopsGoIncident Response
$ npx skills add Velocidex/velociraptor#14
Forensics artefact collection tool for systems running Microsoft Windows
440 starsJun 16, 2026 pushdevopsC++Incident Response
$ npx skills add DFIR-ORC/dfir-orc#15
MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR
720 starsMay 2, 2026 pushdevopsPowerShellIncident Response
$ npx skills add LETHAL-FORENSICS/MemProcFS-Analyzer#16
OPCDE Cybersecurity Conference Materials
621 starsAug 16, 2020 pushdevopsC++Incident Response
$ npx skills add msuiche/OPCDEHow to choose
When should you switch?
Use an alternative when it has a clearer install path, higher trust score, fresher maintenance, or better platform fit for your current agent stack. Keep Osquery Configuration if it already passes your workflow test and repository review.
Next step
Compare top candidates side by side
Open the compare page, test the install commands in a sandbox, and check each repository before using a skill in production.