karmine05 / DEF3NDLinks
🛡️ SIGMA Detection Engineering Platform A comprehensive AI-powered detection engineering platform for security teams to explore MITRE ATT&CK, build SIGMA rules, and visualize attack paths.
☆43Updated last month
Alternatives and similar repositories for DEF3ND
Users that are interested in DEF3ND are comparing it to the libraries listed below
Sorting:
- ☆43Updated this week
- A curated list of LLM driven Cyber security Resources☆32Updated 2 months ago
- Save toil in security operations with: Detection & Intelligence Analysis for New Alerts (D.I.A.N.A. )☆187Updated 10 months ago
- A starter pack of resources to help you get started in Detection Engineering.☆159Updated 3 weeks ago
- Extracts IoCs, TTPs and the relationships between them. Outputs a STIX 2.1 bundle.☆64Updated this week
- ALFA stands for Automated Audit Log Forensic Analysis for Google Workspace. You can use this tool to acquire all Google Workspace audit l…☆164Updated 5 months ago
- A cheatsheet containing AWS CloudTrail events that can be used for Incident Response purposes or Detection Engineering.☆76Updated last year
- This directory features proven systems that demonstrate value to your threat-informed efforts using metrics.☆112Updated 8 months ago
- ☆138Updated last week
- Anvilogic Forge☆105Updated last week
- Summiting the Pyramid is a research project focused on engineering cyber analytics to make adversary evasion more difficult. The research…☆47Updated 2 months ago
- ☆110Updated 2 months ago
- Automating Security Detection Engineering, published by Packt☆60Updated 9 months ago
- ☆105Updated last year
- Sensor Mappings to ATT&CK is a collection of resources to assist cyber defenders with understanding which sensors and events can help det…☆50Updated last month
- ☆93Updated 2 months ago
- ☆95Updated 2 years ago
- Cloud Analytics helps defenders detect attacks to their cloud infrastructure by developing behavioral analytics for cloud platforms as we…☆53Updated 2 years ago
- ☆42Updated this week
- An index of publicly available and open-source threat detection rulesets.☆119Updated 3 months ago
- ATT&CK Sync is a Center for Threat-Informed Defense project that aims to improve the ability for organizations to consume MITRE ATT&CK® v…☆20Updated 2 months ago
- A preconfigured Velociraptor triage collector☆52Updated this week
- Dettectinator - The Python library to your DeTT&CT YAML files.☆115Updated 3 months ago
- Online resources related to SOC Analysts. Incident investigation reference material, blogs, newsletters, good reads, books, trainings, po…☆21Updated 3 weeks ago
- Generates a detailed CSV file containing Sigma Rules statistics for each service or category, and each level, offering a holistic view of…☆10Updated last year
- Mapping of open-source detection rules and atomic tests.☆170Updated 6 months ago
- A browser extension for threat hunting that provides one UI for different SIEMs/EDRs and simplifies investigation☆77Updated last year
- A repository of my own Sigma detection rules.☆160Updated 10 months ago
- Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.☆136Updated this week
- A pySigma wrapper and langchain toolkit for automatic rule creation/translation☆84Updated 2 months ago