Alternatives and similar repositories for event-maturity-matrix

Users that are interested in event-maturity-matrix are comparing it to the libraries listed below

• invictus-ir / Sigma-AWS
  This repository contains the research and components of our research into using Sigma for AWS Incident Response.
  ☆29Updated 2 years ago
• jshlbrd / detection-engineering-pocket-guide
  pocket guide for core detection engineering concepts
  ☆30Updated 2 years ago
• anvilogic-forge / armory
  Anvilogic Forge
  ☆107Updated 2 weeks ago
• Permiso-io-tools / azure-activity-log-axe
  Azure Activity Log Axe is a continually developing tool that simplifies the transactional log format provided by Microsoft. The tool leve…
  ☆29Updated last year
• wiz-sec-public / wiz-research-iocs
  ☆44Updated last month
• bartblaze / FARA
  Repository that contains a set of purposefully erroneous Yara rules.
  ☆58Updated last month
• JPCERTCC / MemoryForensic-on-Cloud
  Memory Forensic System on Cloud
  ☆91Updated last year
• Cyb3rWard0g / IntelRAGU
  Intel Retrieval Augmented Generation (RAG) Utilities
  ☆90Updated last year
• facebookincubator / ForgeArmory
  ForgeArmory provides TTPs that can be used with the TTPForge (https://github.com/facebookincubator/ttpforge).
  ☆117Updated 11 months ago
• splunk / attack-detections-collector
  Collects a listing of MITRE ATT&CK Techniques, then discovers Splunk ESCU detections for each technique
  ☆67Updated last year
• Algbra-Labs-OSS / Chronicle
  ☆65Updated last year
• referefref / aiocrioc
  An LLM and OCR based Indicator of Compromise Extraction Tool
  ☆35Updated 9 months ago
• threat-punter / detection-as-code-example
  A POC to implement Detection-as-Code with Terraform and Sumo Logic.
  ☆29Updated 2 years ago
• vectra-ai-research / derf
  DeRF (Detection Replay Framework) is an "Attacks As A Service" framework, allowing the emulation of offensive techniques and generation o…
  ☆102Updated last year
• okta / customer-detections
  ☆146Updated this week
• elastic / SWAT
  ☆164Updated this week
• n0jam / gcp-ctf-workshop
  ☆41Updated 9 months ago
• delivr-to / detections
  A home for detection content developed by the delivr.to team
  ☆70Updated last month
• runreveal / sigmalite
  ☆47Updated 6 months ago
• invictus-ir / IOCs
  Invictus Threat Intelligence: IOCs and TTPs from blogs, research and more
  ☆12Updated 3 weeks ago
• Neo23x0 / Talks
  Slides of my public talks
  ☆56Updated last year
• darkquasar / AIMOD2
  Adversarial Interception Mission Oriented Discovery and Disruption Framework, or AIMOD2, is a structured threat hunting approach to proac…
  ☆89Updated last year
• mattreduce / cti-self-study
  Track progress and keep notes while working through likethecoins' CTI Self Study Plan
  ☆28Updated 3 years ago
• infosecB / detection-as-code
  An example of how to deploy a Detection as Code pipeline using Sigma Rules, Sigmac, Gitlab CI, and Splunk.
  ☆58Updated 3 years ago
• Permiso-io-tools / capiche
  ☆17Updated 2 months ago
• DefensiveOrigins / DO-LAB
  ☆47Updated 5 months ago
• korniko98 / pivot-atlas
  ☆94Updated last month
• vz-risk / flow
  Tools related to work with Attack Flow (https://github.com/center-for-threat-informed-defense/attack-flow)
  ☆44Updated 3 years ago
• lacework-dev / whalehoney_PUBLIC
  Public release of Whalehoney Honeypot
  ☆29Updated 3 years ago
• op7ic / Cloud-Investigate
  A preconfigured Windows-based system designed for rapid forensic investigations in both Azure and AWS.
  ☆39Updated last year