Alternatives and similar repositories for cloud-threat-detection:

Users that are interested in cloud-threat-detection are comparing it to the libraries listed below

• invictus-ir / Invictus-training
  Repository with supporting materials for Invictus Academy/Training
  ☆42Updated 2 months ago
• microsoft / AzDetectSuite
  A collection of ARM-based detections for Azure/AzureAD based TTPs
  ☆84Updated last year
• center-for-threat-informed-defense / cloud-analytics
  Cloud Analytics helps defenders detect attacks to their cloud infrastructure by developing behavioral analytics for cloud platforms as we…
  ☆53Updated last year
• Permiso-io-tools / azure-activity-log-axe
  Azure Activity Log Axe is a continually developing tool that simplifies the transactional log format provided by Microsoft. The tool leve…
  ☆26Updated 6 months ago
• piercing-index / cloud-vulnerabilities
  ☆41Updated 2 weeks ago
• eshlomo1 / CloudSec
  Welcome to the Cloud Security Toolkit repository, your all-in-one destination for cutting-edge cloud security resources! Whether you're d…
  ☆20Updated last week
• SecureHats / Sentinel-playground
  Solution to deploy a Sentinel playground demo environment
  ☆57Updated last year
• msdirtbag / ADXFlowmaster
  ADXFlowmaster helps SecOps teams Threat Hunt suspicious network traffic inside & outside of Azure.
  ☆34Updated 4 months ago
• jsa2 / CloudShellAadApps
  ☆26Updated last year
• invictus-ir / Sigma-AWS
  This repository contains the research and components of our research into using Sigma for AWS Incident Response.
  ☆27Updated last year
• cylaris / awesomekql
  Microsoft Sentinel, Defender for Endpoint - KQL Detection Packs
  ☆52Updated last year
• Permiso-io-tools / cloudtail
  ☆28Updated 4 months ago
• threat-punter / detection-as-code-example
  A POC to implement Detection-as-Code with Terraform and Sumo Logic.
  ☆27Updated last year
• SecureHats / validate-detections
  GitHub action for validating Microsoft Sentinel detection rules
  ☆13Updated last year
• carta / krang
  Knowledge Report Alert & Normalization Generator
  ☆27Updated 11 months ago
• DataDog / cloud-siem-aws-threat-emulation
  A guide to simplify the process of evaluating Datadog's Cloud SIEM security capabilities to detect AWS threats.
  ☆18Updated last year
• huntresslabs / rogueapps
  When good OAuth apps go rogue. Documents observed OAuth application tradecraft
  ☆68Updated 2 months ago
• nicolonsky / ITDR
  Collection of Microsoft Identity Threat Detection and Response resources.
  ☆40Updated last week
• msdirtbag / MicrosoftPurpleTeamToolkit
  ☆42Updated 11 months ago
• JouniMi / Threathunt.blog
  Queries from the blog posts.
  ☆16Updated 5 months ago
• O3-Cyber / AzureADRoleMonitor
  ☆45Updated 2 weeks ago
• center-for-threat-informed-defense / summiting-the-pyramid
  Summiting the Pyramid is a research project focused on engineering cyber analytics to make adversary evasion more difficult. The research…
  ☆35Updated 3 weeks ago
• invictus-ir / aws-cheatsheet
  A cheatsheet containing AWS CloudTrail events that can be used for Incident Response purposes or Detection Engineering.
  ☆67Updated 10 months ago
• Bert-JanP / SecScripts
  Security Scripts and Sources for daily usage.
  ☆54Updated last month
• invictus-ir / Blue-team-app-Office-365-and-Azure
  ☆72Updated 4 months ago
• garybushey / ProgrammingMicrosoftSentinel
  Programming Microsoft Sentinel book
  ☆25Updated last year
• cado-security / AWS_EKS_Cluster_Forensics
  AWS EKS Cluster Forensics
  ☆23Updated 3 years ago
• trustoncloud / threatmodel-for-azure-storage
  ThreatModel for Azure Storage - Library of all the attack scenarios on Azure Storage, and how to mitigate them following a risk-based app…
  ☆57Updated last year
• FalconForceTeam / KQLAnalyzer
  REST server that can analyze Kusto KQL queries against the Sentinel and Microsoft 365 Defender schemas.
  ☆32Updated last month