A small crappy script I wrote that converts the Sigma Windows Process Creation events to KQL via PySigma. Designed for CI/CD
☆10Nov 7, 2023Updated 2 years ago
Alternatives and similar repositories for ConvertSigmaRepo2KQL
Users that are interested in ConvertSigmaRepo2KQL are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Pure Clojure implementation of the Advanced Encryption Standard (AES) for encryption and decryption using 128, 192, and 256 bit keys base…☆16Feb 8, 2023Updated 3 years ago
- Scripts written in BASH, PowerShell, Python, and other languages.☆11Aug 5, 2023Updated 3 years ago
- Markdown generation for Clojure☆15Oct 8, 2024Updated 2 years ago
- A personal second brain for Claude Code: a Markdown vault compiled into cited wiki pages, with a deterministic Python engine.☆20Oct 19, 2026Updated last week
- This repository is used by FalconForce to release parts of the internal tools used for maintaining, validating and automatically deployin…☆19Mar 10, 2023Updated 3 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A POC to implement Detection-as-Code with Terraform and Sumo Logic.☆31Jul 27, 2023Updated 3 years ago
- The object detection solution accelerator provides a pre-packaged solution to train, deploy and monitor custom object detection models us…☆14Jan 24, 2024Updated 2 years ago
- Mapping of open-source detection rules and atomic tests.☆217Jul 15, 2026Updated 3 months ago
- ☆14Jun 15, 2026Updated 4 months ago
- ☆18Sep 21, 2021Updated 5 years ago
- Youpot is a novel proxy-back honeypot☆17Dec 1, 2025Updated 10 months ago
- EDR/Analyst validation tool☆17Nov 22, 2025Updated 11 months ago
- A python package to extract attachments from .eml files (email messages saved as files)☆24Jun 27, 2023Updated 3 years ago
- Caido plugin that hunts CSP misconfigs & cracks headers wide open.☆19Oct 15, 2026Updated 2 weeks ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Manage and maintain Defender XDR custom collection configuration☆41Nov 19, 2025Updated 11 months ago
- ☆12Feb 21, 2024Updated 2 years ago
- Misc. content for Microsoft Sentinel☆17Apr 12, 2024Updated 2 years ago
- My Notes from Hugging Face AI Agents Course☆21Feb 18, 2025Updated last year
- Repo with supporting material for the talk titled "Cracking the Beacon: Automating the extraction of implant configurations"☆11Feb 6, 2025Updated last year
- ☆20May 5, 2024Updated 2 years ago
- Ingest Nessus files into Elasticsearch using PowerShell!☆19Mar 22, 2026Updated 7 months ago
- Presentations from Conferences☆31Sep 14, 2024Updated 2 years ago
- The idea is simply to save some quick notes that will make it easier for Splunk users to leverage KQL (Kusto), especially giving projects…☆45Nov 7, 2020Updated 5 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- A Clojure library for transforming map keys.☆35Nov 17, 2014Updated 11 years ago
- Search an entire directory of .eml email files for a word or phrase... in over 100 languages.☆12Feb 28, 2023Updated 3 years ago
- A production-ready, enterprise-grade MDR framework that transforms chaotic security alerts into structured, actionable intelligence.☆28Feb 14, 2026Updated 8 months ago
- Tool and Jupyter Notebook used in "Enhance Investigations Using LLM, Embeddings, and Clustering" SANS AI Cybersecurity Summit talk.☆18Mar 29, 2025Updated last year
- Dreadnode Strikes SDK☆30Updated this week
- ☆25Oct 1, 2026Updated 3 weeks ago
- Some proxy utilities I've made. PacDbg to debug and troubelshoot a PacFile, and CustomProxy to browse the internet with a custom proxy se…☆24Sep 12, 2017Updated 9 years ago
- Basic Wireshark LUA dissector for TriStation Protocol☆11Jun 19, 2018Updated 8 years ago
- From your Markdown to generated chapters, run ScriptAnalyzer on your examples and generate HTML, a Word Doc or PDF. Table of Contents inc…☆31Apr 18, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Public Chronicle Detection Rules☆12Apr 25, 2023Updated 3 years ago
- Threat Hunting is time consuming enough as it is. Coming up with and tracking metrics to justify your hunt team to the Execs often takes…☆13Dec 7, 2022Updated 3 years ago
- A collection of ARM-based detections for Azure/AzureAD based TTPs☆91Dec 12, 2023Updated 2 years ago
- Default Detections for EDR☆96Feb 20, 2024Updated 2 years ago
- ☆10Dec 8, 2023Updated 2 years ago
- Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.☆13Updated this week
- Monitor your IP reputation for Email sending or Email marketing.☆42Jul 27, 2013Updated 13 years ago