Adversarial Detection Engineering knowledge base — ADE taxonomy, worked technique files, platform bug patterns, mitigations, and purple-team scoping tooling.
☆88Sep 30, 2026Updated last month
Alternatives and similar repositories for adeskills
Users that are interested in adeskills are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A threat hunting process☆152Updated this week
- A framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concret…☆67Oct 29, 2026Updated last week
- Detection engineering with durable memory, a five-stage lifecycle, and an agentic surface — the sibling of ATHF.☆37Oct 14, 2026Updated 3 weeks ago
- Always-on, cross-platform telemetry daemon for AI agent activity. Sysmon for AI agents.☆63Jul 28, 2026Updated 3 months ago
- ATHF is a framework for agentic threat hunting - building systems that can remember, learn, and act with increasing autonomy.☆409Oct 22, 2026Updated 2 weeks ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Community-driven PowerShell detection indicators☆47Jan 27, 2026Updated 9 months ago
- Detection engineering template☆15Jul 24, 2025Updated last year
- Generate realistic synthetic security logs for cybersecurity threat hunting training and research☆297Updated this week
- Threat feeds designed to extract adversarial TTPs and IOCs, using: ✨AI✨☆75Jun 17, 2026Updated 4 months ago
- MCP to help Defenders Detection Engineer Harder and Smarter☆522Updated this week
- A public repository of quality research on cyber attack techniques. This is the backend for the Technique Research Report (TRR) Library.☆33Updated this week
- ☆21Sep 11, 2026Updated last month
- ☆28Oct 22, 2026Updated 2 weeks ago
- how to strangle threats☆70Updated this week
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Detection Reliability And Precision Efficiency (DRAPE) is an index used to assess detection performance☆36Nov 17, 2025Updated 11 months ago
- A production-ready, enterprise-grade MDR framework that transforms chaotic security alerts into structured, actionable intelligence.☆28Feb 14, 2026Updated 8 months ago
- Automated adversary emulation (Caldera) against an AD lab to validate Sigma detection coverage and map results to MITRE ATT&CK.☆59Sep 25, 2026Updated last month
- Summiting the Pyramid is a research project focused on engineering cyber analytics to make adversary evasion more difficult. The research…☆69Sep 29, 2026Updated last month
- Collection of prompts for helping conduct structured analytic techniques to help with threat intelligence assessments☆13Jan 5, 2026Updated 10 months ago
- ☆17Aug 27, 2026Updated 2 months ago
- MISP to Microsoft Defender integration☆19Jul 9, 2026Updated 3 months ago
- Master the art of cloud exploitation. A specialized resource for offensive security researchers and red teamers focused on weaponizing vu…☆37Oct 28, 2026Updated last week
- Finds the detection rules in your SIEM that are running blind☆23Updated this week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A complete Sigma detection engineering toolkit: parser, linter, evaluator, correlation engine, conversion framework, streaming daemon, MC…☆184Updated this week
- A curated collection of DFIR skills and workflows for InfoSec practitioners.☆325May 14, 2026Updated 5 months ago
- Open, practitioner-maintained Detection Engineering curriculum.☆23Updated this week
- EntraTrace is a defensive security research tool for tracking and identifying the behavior of offensive tooling targeting Microsoft Entra…☆122Updated this week
- LLM-assisted adversary procedure extraction pipeline for threat-informed defense cycle.☆22Sep 20, 2026Updated last month
- Helping defenders learn and validate npm supply-chain detections with safe atomic tests.☆35Oct 30, 2025Updated last year
- Self-hosted multi-engine Sigma detection for event logs☆43Updated this week
- APISignature is a plugin for x64dbg that help the malware analysts & reverse engineers during analysis by adding a reference for more tha…☆38Aug 15, 2026Updated 2 months ago
- Run TTPs, with AI!☆144Feb 23, 2026Updated 8 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Assess, convert and deploy Microsoft Sentinel analytics rules as Defender XDR custom detections☆16Sep 29, 2026Updated last month
- CTI resources for Claude, maintained by Feedly☆38Oct 21, 2026Updated 2 weeks ago
- Lists of independent cybersecurity blogs covering threat intelligence, purple team, red team, threat hunting, and detection engineering. …☆44Sep 15, 2026Updated last month
- A one-page reference for AI risk, built to widen the conversation before formal assessment. Organized by who owns the risk, with every fa…☆82Oct 11, 2026Updated 3 weeks ago
- ☆58Mar 6, 2026Updated 8 months ago
- Zero-touch pipeline that turns newly weaponized CVEs from the CISA Known Exploited Vulnerabilities (KEV) catalog into production-ready Si…☆43Sep 9, 2026Updated last month
- Local-LLM alert triage for self-hosted SOCs.☆14Sep 25, 2026Updated last month