elastic / detection-rules-explorer

Related projects ⓘ

Alternatives and complementary repositories for detection-rules-explorer

• mthcht / ThreatHunting-Keywords-yara-rules
  yara detection rules for hunting with the threathunting-keywords project
  ☆85Updated this week
• xg5-simon / MS-Graph-BlueTeam
  MS Graph Commands and Tools for Blue Teamers
  ☆48Updated 11 months ago
• AttackIQ / SigmAIQ
  A pySigma wrapper and langchain toolkit for automatic rule creation/translation
  ☆66Updated this week
• thremulation-station / thremulation-station
  Small-scale threat emulation and detection range built on Elastic and Atomic Redteam.
  ☆35Updated 11 months ago
• Neo23x0 / Talks
  Slides of my public talks
  ☆46Updated 11 months ago
• brokensound77 / LoFP
  Living off the False Positive!
  ☆29Updated 2 months ago
• bittib010 / AjourVolAutolity
  A project that aims to automate Volatility3 at scale with the use of cloud strength and the power of KQL inside ADX.
  ☆15Updated 2 weeks ago
• cybergoatpsyops / detections
  Placeholder for my detection repo and misc detection engineering content
  ☆43Updated last year
• magicsword-io / LOLBASline
  Baseline a Windows System against LOLBAS
  ☆25Updated 6 months ago
• joeavanzato / ThreatSim
  Threat Simulator for Enterprise Networks
  ☆14Updated 2 years ago
• tropChaud / webpage2attack
  Generate portable TTP intelligence from a web-based report
  ☆30Updated 2 years ago
• NextronSystems / evtx-baseline
  A repository hosting example goodware evtx logs containing sample software installation and basic user interaction
  ☆68Updated 11 months ago
• The-DFIR-Report / Yara-Rules
  ☆61Updated last month
• abusech / ThreatFox
  Open IOC sharing platform
  ☆52Updated this week
• Retrospected / PurpleKeep
  Providing Azure pipelines to create an infrastructure and run Atomic tests.
  ☆50Updated last year
• center-for-threat-informed-defense / attack-powered-suit
  ATT&CK Powered Suit is a browser extension that puts the complete MITRE ATT&CK® knowledge base at your fingertips with text search, conte…
  ☆72Updated last week
• olafhartong / DefenderHarvester
  Expose a lot of MDE telemetry that is not easily accessible in any searchable form
  ☆99Updated 4 months ago
• center-for-threat-informed-defense / summiting-the-pyramid
  Summiting the Pyramid is a research project focused on engineering cyber analytics to make adversary evasion more difficult. The research…
  ☆26Updated 3 weeks ago
• priamai / sigmatau
  An extension of the sigma standard to include security metrics.
  ☆15Updated last year
• MHaggis / ASRGEN
  ASR Configurator, Essentials and Atomic Testing
  ☆36Updated last week
• DCScoder / ESXiTri
  ESXi Cyber Security Incident Response Script
  ☆20Updated 2 months ago
• joeavanzato / velociraptor-timeline-creator
  VTC - Velociraptor Timeline Creator
  ☆15Updated 5 months ago
• huntresslabs / threat-intel
  This repository contains supplemental items including IOCs, and signatures discussed in Huntress blogposts, and other media.
  ☆28Updated last week
• fkie-cad / amides
  An Adaptive Misuse Detection System
  ☆29Updated last week
• SigmaHQ / pySigma-backend-splunk
  pySigma Splunk backend
  ☆34Updated 7 months ago
• Sam0x90 / CB-Threat-Hunting
  CarbonBlack EDR detection rules and response actions
  ☆71Updated 2 months ago
• freeload101 / Bloodhound-Portable
  Bloodhound Portable for Windows
  ☆51Updated last year
• 0xAnalyst / DefenderATPQueries
  Hunting Queries for Defender ATP
  ☆72Updated last week
• OTRF / OSSEM-DD
  OSSEM Data Dictionaries
  ☆58Updated 2 months ago
• MHaggis / ShellSweep
  ShellSweeping the evil.
  ☆52Updated 4 months ago