attackevals / aelLinks
ATT&CK Evaluations Library
☆91Updated last week
Alternatives and similar repositories for ael
Users that are interested in ael are comparing it to the libraries listed below
Sorting:
- Set of SIGMA rules (>350) mapped to MITRE ATT&CK tactic and techniques☆411Updated 2 months ago
- Rules generated from our investigations.☆203Updated 7 months ago
- Signatures and IoCs from public Volexity blog posts.☆362Updated last month
- Set of EVTX samples (>270) mapped to MITRE ATT&CK tactic and techniques to measure your SIEM coverage or developed new use cases.☆608Updated last month
- Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-Cradle…☆312Updated 4 years ago
- Automated YARA Rule Standardization and Quality Assurance Tool☆275Updated last week
- PCAP Samples for Different Post Exploitation Techniques☆368Updated 4 years ago
- OSSEM Detection Model☆182Updated 3 years ago
- Pointing cybersecurity teams to thousands of detection rules and offensive security tests aligned with common attacker techniques☆142Updated last year
- Automatically created C2 Feeds☆661Updated this week
- Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.☆213Updated this week
- Sigma rule specification☆170Updated last month
- ☆512Updated last year
- ☆152Updated 3 months ago
- ☆553Updated 2 years ago
- Sigma rules from Joe Security☆230Updated last year
- MAD ATT&CK Defender: ATT&CK Adversary Emulation Repository☆127Updated 2 years ago
- Ransomware simulator written in Golang☆470Updated 3 years ago
- An opensource sigma conversion tool built using pysigma☆157Updated 2 weeks ago
- Cobalt Strike Beacon configuration extractor and parser.☆160Updated 3 months ago
- MAL-CL (Malicious Command-Line)☆322Updated 3 years ago
- Awesome list of keywords and artifacts for Threat Hunting sessions☆629Updated 5 months ago
- A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs☆776Updated 2 weeks ago
- ☆78Updated 4 months ago
- Public Repo for Atomic Test Harness☆283Updated 9 months ago
- Threat Hunting queries for various attacks☆244Updated 2 weeks ago
- A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters …☆297Updated this week
- A collection of files with indicators supporting social media posts from Palo Alto Network's Unit 42 team to disseminate timely threat in…☆441Updated last week
- Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)☆519Updated last week
- Place for resources used during the Mordor Detection hackathon event featuring APT29 ATT&CK evals datasets☆145Updated 5 years ago