☆122May 26, 2025Updated last year
Alternatives and similar repositories for DetectIQ
Users that are interested in DetectIQ are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A pySigma wrapper and langchain toolkit for automatic rule creation/translation☆98Nov 3, 2025Updated 11 months ago
- Mapping of open-source detection rules and atomic tests.☆217Jul 15, 2026Updated 3 months ago
- An opensource sigma conversion tool built using pysigma☆176Updated this week
- This repository contains scripts designed to streamline and simplify workflows for purple/blue/red teamers, making day-to-day operations …☆13Jul 18, 2026Updated 3 months ago
- Save toil in security operations with: Detection & Intelligence Analysis for New Alerts (D.I.A.N.A. )☆224Sep 4, 2024Updated 2 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Turn any blog into structured threat intelligence.☆64Oct 19, 2026Updated last week
- A framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concret…☆65Sep 28, 2026Updated last month
- yara detection rules for hunting with the threathunting-keywords project☆171May 11, 2025Updated last year
- The LOLBins CTI-Driven (Living-Off-the-Land Binaries Cyber Threat Intelligence Driven) is a project that aims to help cyber defenders und…☆132Oct 20, 2026Updated last week
- Menu for Thor scanner lite☆20Oct 24, 2025Updated last year
- This project automates the creation of a complete security lab environment for detection engineering and attack simulation.☆14Aug 8, 2025Updated last year
- Open-source BlackStork templates for cybersecurity use cases☆34Oct 4, 2026Updated 3 weeks ago
- A fun POC that is built to understand AI security agents.☆36Oct 30, 2025Updated 11 months ago
- Living off the False Positive!☆44Apr 3, 2026Updated 6 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- AI-powered cybersecurity attack flow visualization tool using MITRE ATT&CK☆252Sep 1, 2026Updated last month
- ☆27Feb 3, 2026Updated 8 months ago
- This is a collection of threat detection rules / rules engines that I have come across.☆301May 5, 2024Updated 2 years ago
- ☆14Sep 22, 2023Updated 3 years ago
- A curated collection of DFIR skills and workflows for InfoSec practitioners.☆325May 14, 2026Updated 5 months ago
- A tool for fetching DFIR and other GitHub tools.☆32Sep 17, 2026Updated last month
- A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters …☆357Updated this week
- AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE…☆1,256Updated this week
- PurpleLab is an efficient and readily deployable lab solution, providing a swift setup for cybersecurity professionals to test detection…☆746Aug 22, 2026Updated 2 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- This project aims to compare and evaluate the telemetry of various EDR products.☆1,998Updated this week
- A home for detection content developed by the delivr.to team☆75Aug 10, 2025Updated last year
- PowerShell tools to help defenders hunt smarter, hunt harder.☆491Oct 29, 2025Updated last year
- Baseline a Windows System against LOLBAS☆77Jun 5, 2026Updated 4 months ago
- A repository of my own Sigma detection rules.☆167Nov 25, 2025Updated 11 months ago
- ☆18Updated this week
- A curated list of LLM driven Cyber security Resources☆60Updated this week
- Repository documenting how Threat Intelligence and / or a Threat Intelligence Platform can prove its value to an organisation.☆54Oct 23, 2024Updated 2 years ago
- sKaleQL is an opinionated template repository for managing, executing, and organizing Kusto Query Language (KQL) queries against Azure Lo…☆21May 20, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Public research documentation, methodology, and STIX examples for TI Mindmap HUB - an AI-powered Cyber Threat Intelligence platform☆20Updated this week
- 🧰 ESXi Testing Tookit is a command-line utility designed to help security teams test ESXi detections.☆88Apr 20, 2025Updated last year
- A curated list of Awesome Threat Intelligence Blogs☆567Jun 12, 2026Updated 4 months ago
- Convert Sigma rules to SIEM queries, directly in your browser.☆124Updated this week
- This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple…☆968Updated this week
- Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)☆603Oct 18, 2026Updated last week
- ☆24Oct 8, 2025Updated last year