Detection engineering with durable memory, a five-stage lifecycle, and an agentic surface — the sibling of ATHF.
☆37Oct 14, 2026Updated 3 weeks ago
Alternatives and similar repositories for agentic-detection-engineering-framework
Users that are interested in agentic-detection-engineering-framework are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A agentic Intel to hunt pipeline. Get hunting faster☆16Oct 19, 2026Updated 3 weeks ago
- Reverse-engineering suite for omp: radare2 tools, evidence store, signed audit log, RE status band, and report generator.☆12Aug 4, 2026Updated 3 months ago
- coreSigma is a macOS ESF & UL telemetry pipeline, detection, and threat hunting app for security analysis, using Sigma and Sigma backend …☆19Jan 29, 2026Updated 9 months ago
- A threat hunting process☆151Updated this week
- Open, practitioner-maintained Detection Engineering curriculum.☆23Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Always-on, cross-platform telemetry daemon for AI agent activity. Sysmon for AI agents.☆63Jul 28, 2026Updated 3 months ago
- Adversarial Detection Engineering knowledge base — ADE taxonomy, worked technique files, platform bug patterns, mitigations, and purple-t…☆88Sep 30, 2026Updated last month
- Self-hosted multi-engine Sigma detection for event logs☆44Nov 1, 2026Updated last week
- A threat hunting platform that turns Sigma detection rules into actionable OpenSearch queries, letting security analysts go from 'I need …☆12Dec 11, 2025Updated 10 months ago
- ATHF is a framework for agentic threat hunting - building systems that can remember, learn, and act with increasing autonomy.☆410Updated this week
- ☆28Updated this week
- A collection of Sigma detection rules for SIEM platforms to identify malicious or suspicious activity and potential threats. Modify the r…☆31Oct 28, 2026Updated last week
- Open-source, offline forensic scanner CLI tool designed to detect evidence of git repo collection or upload by the Grok Build CLI to xAI …☆19Jul 21, 2026Updated 3 months ago
- Synapse Rapid Power-up for SinkDB☆11Jun 24, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Master the art of cloud exploitation. A specialized resource for offensive security researchers and red teamers focused on weaponizing vu…☆37Oct 28, 2026Updated last week
- EntraTrace is a defensive security research tool for tracking and identifying the behavior of offensive tooling targeting Microsoft Entra…☆122Updated this week
- Automating Security Detection Engineering, published by Packt☆78Oct 12, 2024Updated 2 years ago
- Community-driven PowerShell detection indicators☆47Jan 27, 2026Updated 9 months ago
- Generate malware traces for detection tests☆20Nov 2, 2026Updated last week
- hunt.md: an open, plain-text format for threat hunts. Spec, examples and tooling.☆42Oct 29, 2026Updated last week
- Convert MISP events to Elastalert rules☆12Aug 10, 2021Updated 5 years ago
- [ARCHIVED] Public objects moved to OpenTideHQ/library☆17Sep 9, 2026Updated 2 months ago
- A CTI program management and production platform built around MISP☆51Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Official, curated detection content (Sigma, YARA, IOC packs) for the Rustinel endpoint detection engine.☆29Nov 3, 2026Updated last week
- Self-hosted threat intelligence platform — feed aggregation, AI triage, MITRE ATT&CK coverage, and Sentinel-integrated detection engineer…☆60Oct 15, 2026Updated 3 weeks ago
- Jevline: start from one confirmed-malicious process; Jev links the rest of the incident into a timeline, execution chain and evidence tab…☆47Oct 15, 2026Updated 3 weeks ago
- how to strangle threats☆70Nov 2, 2026Updated last week
- The idea is simply to save some quick notes that will make it easier for Splunk users to leverage KQL (Kusto), especially giving projects…☆45Nov 7, 2020Updated 6 years ago
- Generate realistic synthetic security logs for cybersecurity threat hunting training and research☆298Updated this week
- MCP to help Defenders Detection Engineer Harder and Smarter☆525Updated this week
- Open test set of .eml emails for checking how email security controls and AI mailbox assistants handle indirect prompt injection. It cros…☆22Oct 31, 2026Updated last week
- R interface to the Censys "cyber"/scans search engine • https://www.censys.io/tutorial☆14Aug 9, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- All the principles of the AI modular structure that generates malicious code fragments sold on the dark web☆71Apr 30, 2024Updated 2 years ago
- Agentic DFIR☆103Updated this week
- ☆21Jul 29, 2025Updated last year
- A framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concret…☆67Oct 29, 2026Updated last week
- Dettectinator - The Python library to your DeTT&CT YAML files.☆118Jan 22, 2026Updated 9 months ago
- Threat Modeling with ATT&CK defines how to integreate MITRE ATT&CK® into your organization’s existing threat modeling methodology.☆17May 28, 2025Updated last year
- Cyber Threat Intelligence Capability Maturity Model (CTI-CMM), a dedicated maturity framework to empower your team. Inspired by industry …☆51Jun 3, 2026Updated 5 months ago
Are these results useful?