☆17Aug 27, 2026Updated 2 months ago
Alternatives and similar repositories for soc-dataset-thebiggerinterview
Users that are interested in soc-dataset-thebiggerinterview are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Secrets scanner with a twist... this is for getting threat actor credentials from MALWARE. Acquire TA creds from FLOSS exports, memdumps…☆43Aug 9, 2026Updated 3 months ago
- A public repository of quality research on cyber attack techniques. This is the backend for the Technique Research Report (TRR) Library.☆35Nov 5, 2026Updated last week
- A framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concret…☆67Oct 29, 2026Updated 2 weeks ago
- Zeek and Suricata Detections for "php2shell" CVE-2026-109618 and CVE-2026-109619☆16Nov 4, 2026Updated last week
- Local-LLM alert triage for self-hosted SOCs.☆15Nov 7, 2026Updated last week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Security Agent Benchmarking and Evaluation Research☆22Nov 5, 2026Updated last week
- An OpenAI API Compatible Honeypot Gateway☆28Mar 17, 2025Updated last year
- ☆23Oct 19, 2026Updated 3 weeks ago
- ☆14Mar 19, 2024Updated 2 years ago
- Datasets from the Sophos Active Adversary Report☆14Feb 24, 2026Updated 8 months ago
- Jevline: start from one confirmed-malicious process; Jev links the rest of the incident into a timeline, execution chain and evidence tab…☆50Oct 15, 2026Updated 3 weeks ago
- Security Content for the PEAK Threat Hunting Framework☆52Aug 9, 2026Updated 3 months ago
- DetectPack Forge turns plain-English behaviors or sample logs into production-ready detection packs — Sigma, KQL (Sentinel), SPL (Splunk)…☆24Mar 19, 2026Updated 7 months ago
- ☆21Sep 11, 2026Updated 2 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Blacklight is a cross-platform toolkit for mapping, analyzing, and understanding the local AI agent attack surface across Windows, macOS,…☆89Oct 23, 2026Updated 3 weeks ago
- ☆28Nov 6, 2026Updated last week
- Framework-agnostic log sanitizer for browsers and Node.js. Redacts secrets and infrastructure identifiers with stable HMAC tokens so even…☆52Oct 14, 2026Updated last month
- Adversarial Detection Engineering knowledge base — ADE taxonomy, worked technique files, platform bug patterns, mitigations, and purple-t…☆92Sep 30, 2026Updated last month
- Zero-touch pipeline that turns newly weaponized CVEs from the CISA Known Exploited Vulnerabilities (KEV) catalog into production-ready Si…☆43Sep 9, 2026Updated 2 months ago
- The self-hosted KQL query management platform for SOC teams☆23May 20, 2026Updated 5 months ago
- ☆11May 24, 2022Updated 4 years ago
- KQL Queries☆44Oct 2, 2026Updated last month
- Source code for the "Sharpening Kubernetes Audit Logs with Context Awareness" paper by Franzil, Armani, Dias Knob, and Siracusa☆11Oct 22, 2026Updated 3 weeks ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Detection engineering template☆15Jul 24, 2025Updated last year
- Your Browser-based EVTX Companion☆123Jul 21, 2026Updated 3 months ago
- Appendix resources for Intrinsec's "Amélioration des capacités de détection" handbook.☆12Mar 26, 2018Updated 8 years ago
- A Microsoft Sentinel toolkit for generating and ingesting **realistic sample data** into Log Analytics tables via the Azure Monitor Logs …☆21Oct 1, 2026Updated last month
- A script to analyze geographic GSuite Login activity☆10Sep 3, 2017Updated 9 years ago
- AWS Elastic Load Balancer Configuration Auditor☆13Apr 28, 2026Updated 6 months ago
- [EMNLP 2025] Official code for the paper "SafeKey: Amplifying Aha-Moment Insights for Safety Reasoning"☆16May 12, 2026Updated 6 months ago
- how to strangle threats☆70Updated this week
- ☆58Mar 6, 2026Updated 8 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- An Open Harness and Benchmark for AI in Cybersecurity Operations.☆69Updated this week
- ☆11Oct 15, 2025Updated last year
- An AWS CloudTrail exported logs analyzer tool☆21Oct 7, 2026Updated last month
- Browse and diff ETW provider snapshots across Windows builds. Backed by ETWInspector.☆40Sep 9, 2026Updated 2 months ago
- A lab environment for learning about MSTICPy☆39Feb 3, 2023Updated 3 years ago
- Lightweight open-core SIEM in Rust — S3-compatible for logs, Postgres for state.☆75Updated this week
- A Dumb Windows App With A Sweet Theme Song for Inspecting Bad Clipboard Content☆12Apr 25, 2025Updated last year
Are these results useful?