An introduction to detection engineering
☆14Jan 3, 2025Updated last year
Alternatives and similar repositories for Detection-Engineering-Intro
Users that are interested in Detection-Engineering-Intro are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A Public Package Scanner for The Community☆13Jan 14, 2026Updated 9 months ago
- A new way for you to structure your threat content.☆11Oct 24, 2024Updated 2 years ago
- Everything related to YARA☆16Apr 18, 2026Updated 6 months ago
- 32 production-quality KQL detection rules for Microsoft Sentinel, mapped to MITRE ATT&CK for Cloud, credential access, lateral movement, …☆15Aug 1, 2026Updated 2 months ago
- Operational Relay Box Intelligence, Tracking, & Analysis Lexicon (ORBITAL)☆38Aug 30, 2026Updated 2 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- GenAI-STIX2.1-Generator is a tool that leverages Azure OpenAI capabilities to transform threat intelligence reports from unstructured web…☆24Mar 24, 2025Updated last year
- Security content lifecycle management for Microsoft Sentinel and Microsoft Defender XDR.☆17Oct 18, 2026Updated last week
- Use fingerprinting to actively hunt for Command and Control servers on Shodan. Process threat feeds from Abuse.ch services to create a …☆11May 12, 2023Updated 3 years ago
- Public Data Set of AI Favicon WorkFlow Output☆16Jul 1, 2026Updated 3 months ago
- Generate malware traces for detection tests☆19Oct 13, 2026Updated 2 weeks ago
- Assess, convert and deploy Microsoft Sentinel analytics rules as Defender XDR custom detections☆15Sep 29, 2026Updated last month
- ☆34Apr 29, 2026Updated 6 months ago
- my MSTICpy practice and custom tools repository☆11Apr 23, 2025Updated last year
- Always-on, cross-platform telemetry daemon for AI agent activity. Sysmon for AI agents.☆63Jul 28, 2026Updated 3 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Golang C2 Client + PHP API Handler☆15Aug 1, 2023Updated 3 years ago
- CLI tool that explains CVEs in plain English and scans repos for impact. Powered by Claude.☆20May 12, 2026Updated 5 months ago
- Reverse engineering and live validation of the Windows Endpoint Security Platform preview☆18Sep 11, 2026Updated last month
- Work in Progress repo☆16Apr 18, 2019Updated 7 years ago
- Userland EDR for Windows. ETW telemetry, behavioral correlation, MITRE ATT&CK.☆38Updated this week
- ☆19Sep 4, 2022Updated 4 years ago
- RTAA-72, is CVCIO's real-time intelligence dashboard for Twitter☆22Sep 4, 2022Updated 4 years ago
- List with File Extensions used by Ransomware☆42Updated this week
- These FLARE-VM configuration files are designed to be help setup a purpose-built installation, remove unnecessary packages to help stream…☆15Apr 10, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- 🧰 ESXi Testing Tookit is a command-line utility designed to help security teams test ESXi detections.☆88Apr 20, 2025Updated last year
- Archive of publicly available threat INTel reports (mostly APT Reports but not limited to).☆11Sep 30, 2018Updated 8 years ago
- Collection of scripts to automate the Malware Analysis process☆33Oct 27, 2025Updated last year
- RITSEC Weekly Labs☆12Mar 3, 2019Updated 7 years ago
- Invoke-AtomicAssessment is a powerful tool designed to facilitate adversary emulation by leveraging Atomic Red Team.☆47Oct 4, 2026Updated 3 weeks ago
- ☆12Jul 30, 2026Updated 3 months ago
- Automating Cyber Threat Intelligence Reporting with Natural Language Generation☆15Jan 24, 2024Updated 2 years ago
- A specialized environment for crafting, validating, and testing LimaCharlie detection rules☆15Oct 16, 2026Updated 2 weeks ago
- Cloud, CDN, and marketing services leveraged by cybercriminals and APT groups☆62Oct 28, 2022Updated 4 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Get Windows Process List in Rust☆10May 4, 2022Updated 4 years ago
- Automated Malware Behavior Analysis Tool☆12May 13, 2026Updated 5 months ago
- Small App for reading from MHN's hpfeeds broker and writing splunk logs☆10Sep 30, 2019Updated 7 years ago
- Extract payload URLs from Follina (CVE-2022-30190) docx and rtf files☆32Jun 15, 2022Updated 4 years ago
- EntraTrace is a defensive security research tool for tracking and identifying the behavior of offensive tooling targeting Microsoft Entra…☆122Updated this week
- R3D SSH Hunter: The Ultimate SSH Key and Bad Guy Tracker☆12Nov 5, 2024Updated last year
- Vulnerable LLM Application☆14Aug 9, 2026Updated 2 months ago