OCSF Schema
☆914Nov 5, 2026Updated this week
Alternatives and similar repositories for ocsf-schema
Users that are interested in ocsf-schema are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- OCSF Documentation☆170Oct 22, 2026Updated 2 weeks ago
- ☆35Updated this week
- This repo contains example of raw event examples and possible translations to the OCSF schema.☆69Jun 22, 2026Updated 4 months ago
- OCSF Schema WEB Server☆65Updated this week
- Main Sigma Rule Repository☆11,424Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS☆1,708Jan 8, 2025Updated last year
- Substation is a toolkit for routing, normalizing, and enriching security event and audit logs.☆409Updated this week
- Built-in Panther detection rules and policies☆472Updated this week
- A standard for reducing log volume without sacrificing analytical capability☆218Feb 21, 2025Updated last year
- Open Source Security Events Metadata (OSSEM)☆1,303Feb 27, 2023Updated 3 years ago
- OCSF (https://schema.ocsf.io/) models in Python using Pydantic.☆38Oct 26, 2026Updated last week
- Detect Tactics, Techniques & Combat Threats☆2,358Updated this week
- Threatest is a CLI and Go framework for end-to-end testing threat detection rules.☆353Updated this week
- A repository of curated datasets from various attacks☆840Updated this week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- The Splunk schema extension repository☆11Nov 5, 2025Updated last year
- ☆2,961Updated this week
- Granular, Actionable Adversary Emulation for the Cloud☆2,442Updated this week
- Kestrel threat hunting language: building reusable, composable, and shareable huntflows across different data sources and threat intel.☆327Sep 27, 2024Updated 2 years ago
- A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data int…☆2,581Updated this week
- OCSF Schema Validation☆14Updated this week
- Splunk Security Content☆1,730Updated this week
- TheHive is a Cybersecurity Incident Response Management (CIRM) platform, now distributed commercially. Learn more on the official website…☆3,950Jul 25, 2025Updated last year
- Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)☆606Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ✨ A compilation of suggested tools/services for each component in a detection and response pipeline, along with real-world examples. The …☆300Feb 5, 2024Updated 2 years ago
- Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.☆2,473Updated this week
- Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation o…☆1,383Oct 12, 2026Updated 3 weeks ago
- Cartography is a Python tool that pulls infrastructure assets and their relationships into a Neo4j graph database.☆4,177Updated this week
- A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more e…☆4,709Jan 12, 2026Updated 9 months ago
- Microsoft Threat Intelligence Security Tools☆2,020Updated this week
- A framework for developing alerting and detection strategies for incident response.☆927Oct 2, 2026Updated last month
- Save toil in security operations with: Detection & Intelligence Analysis for New Alerts (D.I.A.N.A. )☆224Sep 4, 2024Updated 2 years ago
- ☆102Jul 20, 2026Updated 3 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- ☆37Feb 27, 2025Updated last year
- pocket guide for core detection engineering concepts☆31May 8, 2023Updated 3 years ago
- A repository of my own Sigma detection rules.☆167Nov 25, 2025Updated 11 months ago
- Roota is a public-domain language of threat detection and response that combines native queries from a SIEM, EDR, XDR, or Data Lake with …☆140Jul 19, 2024Updated 2 years ago
- Collaborative Incident Response platform☆1,621Oct 22, 2026Updated 2 weeks ago
- Production-ready detection & response queries for osquery☆651Updated this week
- Anvilogic Forge☆119Mar 31, 2026Updated 7 months ago