Resources and Discussions About Detection Engineering
☆12Sep 28, 2022Updated 4 years ago
Alternatives and similar repositories for Awesome-Detection-Engineering
Users that are interested in Awesome-Detection-Engineering are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Indicators of compromise from to analysis and research by Nextron Threat Research team☆25Updated this week
- This is a repo for fetching Applocker event log by parsing the win-event log☆29Aug 6, 2022Updated 4 years ago
- Validates Sigma rules using the JSON schema☆24Oct 20, 2026Updated 2 weeks ago
- Sigma signatures matcher written in Python☆10Dec 23, 2024Updated last year
- A Sigma based detection pipeline☆12Dec 15, 2023Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆14Jun 15, 2026Updated 4 months ago
- The home of the SDDLMaker☆29Jan 13, 2025Updated last year
- Generic Signature Format for SIEM Systems☆10Nov 1, 2026Updated last week
- simple webapp for converting sigma rules into siem queries using the pySigma library☆50Sep 1, 2023Updated 3 years ago
- Convert Sigma rules to SIEM queries, directly in your browser.☆125Oct 24, 2026Updated 2 weeks ago
- CyberChef - Detection Engineering, TI, DFIR, Malware Analysis Edition☆66Jun 18, 2026Updated 4 months ago
- ☆13Oct 28, 2026Updated last week
- Ansible GHOSTS server role for LUDUS☆15Feb 16, 2026Updated 8 months ago
- Bring Your Own Mitre Att&ck © Matrix !☆12Oct 19, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆23Jun 1, 2022Updated 4 years ago
- Simple EDR that injects a DLL into a process to place a hook on specific Windows API☆100Aug 27, 2023Updated 3 years ago
- Proof-of-Concept to evade auditd by tampering via ptrace☆19Aug 3, 2023Updated 3 years ago
- Authenticode for PNG files☆11Jun 8, 2020Updated 6 years ago
- A pySigma wrapper and langchain toolkit for automatic rule creation/translation☆95Nov 3, 2025Updated last year
- ☆10May 19, 2026Updated 5 months ago
- ☆12Aug 7, 2025Updated last year
- SigmaOptimizer is a Sigma rule generation and optimization tool that automatically creates, tests, and improves Sigma rules based on real…☆11Aug 1, 2025Updated last year
- Sigma rule specification☆214Sep 25, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Source Code Management Attack Toolkit☆13Aug 1, 2022Updated 4 years ago
- Ansible playbook to convert Sigma rules to ElastAlert rules☆10Feb 5, 2021Updated 5 years ago
- ☆16Sep 10, 2021Updated 5 years ago
- pySigma Splunk backend☆47Oct 28, 2026Updated last week
- ⚠️ ARCHIVED**: This repository is no longer actively maintained. All Sigma rules are now managed and available in SIEM Rules☆14Mar 19, 2026Updated 7 months ago
- Playing with PE's and Building Structures by Hand☆22Apr 21, 2022Updated 4 years ago
- pySigma OpenSearch backend☆15Updated this week
- The Linux DFIR Collector is a stand-alone collection tool for Gnu / Linux. Dump artifacts in json format with very few impacts on the hos…☆31May 21, 2026Updated 5 months ago
- ☆14Nov 4, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- The Sigma command line interface based on pySigma☆219Oct 28, 2026Updated last week
- Scans the filesystem for directories that are user-writeable☆13Jun 21, 2021Updated 5 years ago
- ☆33Feb 26, 2022Updated 4 years ago
- Use GZip to compress your .NET assemblies for loading with AssemblyResolve.☆20Apr 11, 2014Updated 12 years ago
- Knowing which rule should trigger according to the redcannary test☆11Nov 23, 2024Updated last year
- Exfiltrate files using the HTTP protocol version ("HTTP/1.0" is a 0 and "HTTP/1.1" is a 1)☆24Oct 23, 2021Updated 5 years ago
- A script used to query the dehashed API and filter for more useful results☆17Jun 20, 2021Updated 5 years ago