isherwood-sec / detection-engineering
☆46Updated last month
Alternatives and similar repositories for detection-engineering:
Users that are interested in detection-engineering are comparing it to the libraries listed below
- Some important DFIR Resources☆83Updated 2 years ago
- SIEM Cheat Sheet☆73Updated last year
- An analytical challenge created to test junior analysts looking to try performing proactive and reactive cyber threat intelligence.☆195Updated 8 months ago
- CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable repor…☆231Updated last week
- Windows Malware Investigation Scripts & Docs☆75Updated 4 months ago
- Tools for simulating threats☆183Updated last year
- This is the One Stop place where you can find almost all of your Tools of Requirements in DFIR☆77Updated 3 years ago
- A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters …☆217Updated last week
- Some Threat Hunting queries useful for blue teamers☆125Updated 2 years ago
- Repository resource for threat hunter☆158Updated 6 years ago
- A library of reference materials, tools, and other resources to aid threat profiling, threat quantification, and cyber adversary defense☆85Updated last year
- Jupyter Notebooks for the Blue Team☆145Updated this week
- Resources To Learn And Understand SIGMA Rules☆173Updated 2 years ago
- ☆172Updated last year
- Practical Threat Detection Engineering, Published by Packt☆66Updated last year
- Creation of a laboratory for malware analysis in AWS☆96Updated 2 years ago
- ☆101Updated last week
- Threat Hunting Toolkit is a Swiss Army knife for threat hunting, log processing, and security-focused data science☆136Updated 3 weeks ago
- ☆57Updated 3 years ago
- MISP Playbooks☆188Updated last month
- The Threat Actor Profile Guide for CTI Analysts☆107Updated last year
- A repository of my own Sigma detection rules.☆157Updated 6 months ago
- MAD ATT&CK Defender: ATT&CK Adversary Emulation Repository☆112Updated last year
- These are open source rules that can be utilized with QRadar to detect various types of threats in the environment.☆54Updated 5 years ago
- CarbonBlack EDR detection rules and response actions☆71Updated 6 months ago
- Repository of public reference frameworks for the DFIR community.☆115Updated last year
- links collected from SOC Core Skills class☆85Updated 4 years ago
- A list of Splunk queries that I've collected and used over time.☆76Updated 4 years ago
- Harness the power of Splunk for your investigations☆94Updated last week
- ☆43Updated last year