A curated reference of threat detection engineering & incident response frameworks, tools, and detection rule sources.
☆13Jun 30, 2026Updated 3 months ago
Alternatives and similar repositories for threat-detection-engineering-reference
Users that are interested in threat-detection-engineering-reference are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Autonomous Offensive Security Intelligence AI-powered multi-agent penetration testing☆16May 10, 2026Updated 5 months ago
- pocket guide for core detection engineering concepts☆31May 8, 2023Updated 3 years ago
- Easily create Splunk searches from Python and get the result as a Python object.☆14May 30, 2024Updated 2 years ago
- Repository containing Jupyter Notebooks for working with OSQuery tables and data☆16May 8, 2020Updated 6 years ago
- Newly registered Domain Monitoring to detect phishing and brand impersonation with subdomain enumeration and source code scraping☆67Oct 18, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Short deep dive into Threat Hunting on AWS☆20Oct 15, 2023Updated 3 years ago
- Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.☆13Mar 20, 2024Updated 2 years ago
- ☆15Dec 6, 2023Updated 2 years ago
- ☆11Feb 9, 2023Updated 3 years ago
- An example of how to deploy a Detection as Code pipeline using Sigma Rules, Sigmac, Gitlab CI, and Splunk.☆62Mar 12, 2022Updated 4 years ago
- A capability modelling and visualisation tool for those on the DevSecOps journey☆11Jun 17, 2026Updated 4 months ago
- Perform file-based malware scan on your on-prem servers with AWS☆14Oct 31, 2023Updated 2 years ago
- Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise☆69Jul 2, 2026Updated 3 months ago
- 🌌 Real-time threat detection for smart contracts☆10May 16, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Terraform scripts that create a honey pot within AWS☆15Jun 7, 2024Updated 2 years ago
- Event Query Router☆12Aug 9, 2019Updated 7 years ago
- ☆13Dec 31, 2021Updated 4 years ago
- Scan your machine for malicious AI agent skills — supports Claude Code, OpenAI Codex, and more.☆16Updated this week
- Collect chrome extensions from various devices and find out if they are malicious☆25Oct 6, 2026Updated 2 weeks ago
- This directory contains random scripts from threat hunting or malware research☆11Feb 15, 2018Updated 8 years ago
- cli-command template☆19Sep 18, 2024Updated 2 years ago
- ☆19Jan 31, 2025Updated last year
- Dynaphish: A complementary module for any reference-based phishing detector with BrandKnowledgeExpansion and WebInteraction☆20Sep 11, 2025Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Find dangling and mistyped hostname references in a DNS zone☆18Aug 6, 2026Updated 2 months ago
- Tool to enumerate unregistered reply URLs for single and multitenant apps in Azure☆17Jan 23, 2025Updated last year
- In line function hooking LKM rootkit☆54Mar 5, 2020Updated 6 years ago
- A library of post-exploitation MacOS scripts based on threat emulation, LOObins, CTI, and MITRE ATT&CK.☆13May 21, 2026Updated 4 months ago
- Generate representative samples from Pwned Passwords (HIBP)☆11Jan 6, 2022Updated 4 years ago
- Various DNS dumps (daily new domains, FQDNs, etc.)☆30Aug 11, 2026Updated 2 months ago
- Scripts to aid intrusion and malware detection using the Jamf Agent and Jamf Server☆10May 4, 2022Updated 4 years ago
- Examples of various Entra ID scenarios in Terraform☆22Sep 24, 2024Updated 2 years ago
- Configs for NECCDC 2017☆16Mar 22, 2017Updated 9 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Queries for Carbon Black Response☆11Feb 11, 2020Updated 6 years ago
- My malware analysis code snippets☆28Jul 15, 2023Updated 3 years ago
- Repository that contains a set of purposefully erroneous Yara rules.☆61Jul 23, 2025Updated last year
- Python implementation of select MicroBurst scripts.☆19Aug 19, 2021Updated 5 years ago
- Legacy password hashing framework for PHP applications needing to support or having previously supported PHP below 5.5☆15Nov 22, 2024Updated last year
- CLI Search for Security Operators of MITRE ATT&CK URLs☆17Jan 5, 2023Updated 3 years ago
- Production-ready SOC implementation with Splunk, SOAR automation, and MITRE ATT&CK detection rules splunk, phantom, zeek, incident-respon…☆15Sep 22, 2025Updated last year