Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.
☆1,357Oct 12, 2026Updated this week
Alternatives and similar repositories for awesome-detection-engineering
Users that are interested in awesome-detection-engineering are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ✨ A compilation of suggested tools/services for each component in a detection and response pipeline, along with real-world examples. The …☆300Feb 5, 2024Updated 2 years ago
- ✨ A curated list of awesome threat detection and hunting resources 🕵️♂️☆4,745Jan 5, 2026Updated 9 months ago
- Splunk Security Content☆1,710Updated this week
- An example of how to deploy a Detection as Code pipeline using Sigma Rules, Sigmac, Gitlab CI, and Splunk.☆62Mar 12, 2022Updated 4 years ago
- Online resources related to Detection Engineering. Detection rules, detection logic, attack samples, detection tests and emulation tools…☆184Aug 22, 2026Updated last month
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A framework for developing alerting and detection strategies for incident response.☆917Oct 2, 2026Updated last week
- Main Sigma Rule Repository☆11,220Updated this week
- KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunt…☆1,759Oct 4, 2026Updated last week
- A starter pack of resources to help you get started in Detection Engineering.☆197Jun 4, 2026Updated 4 months ago
- A repository of my own Sigma detection rules.☆167Nov 25, 2025Updated 10 months ago
- ☆2,719Updated this week
- Detect Tactics, Techniques & Combat Threats☆2,347Sep 14, 2026Updated 3 weeks ago
- Mapping of open-source detection rules and atomic tests.☆217Jul 15, 2026Updated 2 months ago
- This is a collection of threat detection rules / rules engines that I have come across.☆301May 5, 2024Updated 2 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Awesome Security lists for SOC/CERT/CTI☆1,935Updated this week
- A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data int…☆2,567Oct 1, 2026Updated last week
- A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more e…☆4,685Jan 12, 2026Updated 9 months ago
- Granular, Actionable Adversary Emulation for the Cloud☆2,420Updated this week
- A curated knowledge base to build, run and mature a SOC (including CSIRT).☆1,896Updated this week
- Built-in Panther detection rules and policies☆469Updated this week
- Resources To Learn And Understand SIGMA Rules☆189Feb 14, 2023Updated 3 years ago
- Collection of Event ID ressources useful for Digital Forensics and Incident Response☆665Jun 19, 2024Updated 2 years ago
- A repository of curated datasets from various attacks☆831Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Anvilogic Forge☆119Mar 31, 2026Updated 6 months ago
- Awesome list of keywords and artifacts for Threat Hunting sessions☆676Aug 4, 2025Updated last year
- Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS☆1,699Jan 8, 2025Updated last year
- Small and highly portable detection tests based on MITRE's ATT&CK.☆12,654Oct 6, 2026Updated last week
- Practical Threat Detection Engineering, Published by Packt☆98Apr 22, 2026Updated 5 months ago
- A curated list of tools for incident response☆9,445Jul 15, 2026Updated 2 months ago
- Save toil in security operations with: Detection & Intelligence Analysis for New Alerts (D.I.A.N.A. )☆224Sep 4, 2024Updated 2 years ago
- Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise☆69Jul 2, 2026Updated 3 months ago
- A curated list of resources about detecting threats and defending Kubernetes systems.☆411Sep 2, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- This project aims to compare and evaluate the telemetry of various EDR products.☆1,994Sep 28, 2026Updated 2 weeks ago
- ☆102Jul 20, 2026Updated 2 months ago
- Automate the creation of a lab environment complete with security tooling and logging best practices☆5,041Jul 6, 2024Updated 2 years ago
- An index of publicly available and open-source threat detection rulesets.☆141Apr 17, 2025Updated last year
- Threatest is a CLI and Go framework for end-to-end testing threat detection rules.☆347Oct 5, 2026Updated last week
- Collection of example YARA-L rules for use within Google Security Operations☆520Aug 6, 2026Updated 2 months ago
- Hunting queries and detections☆925May 7, 2026Updated 5 months ago