Aggregated ATT&CK technique reporting data. Presented at Splunk GovSummit December 2022
☆19Jul 18, 2025Updated last year
Alternatives and similar repositories for macro-level-attack-trending
Users that are interested in macro-level-attack-trending are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆20Nov 7, 2023Updated 2 years ago
- The Admin Assistant allows Splunk admins to monitor data ingestion and onboarding, RBAC config, user onboarding, and more! Dashboard pane…☆10Feb 27, 2022Updated 4 years ago
- Summiting the Pyramid is a research project focused on engineering cyber analytics to make adversary evasion more difficult. The research…☆70Sep 29, 2026Updated last month
- A Corpus of Data from Various Cybersecurity Blogs☆14Jun 28, 2022Updated 4 years ago
- Splunk Dashboards for GCP☆10Jan 9, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- CISA Known Exploited Vulnerabilities Catalog Enrichment☆19Jun 24, 2024Updated 2 years ago
- An AI-backed threat hunting assistant that aligns to the PEAK framework.☆65Jun 1, 2026Updated 4 months ago
- Tool for obtaining information about PPL processes☆16Feb 12, 2024Updated 2 years ago
- A repository of my own Sigma detection rules.☆167Nov 25, 2025Updated 11 months ago
- Splunk Searches and Dashboards for DNS Threat Hunting☆11Mar 5, 2018Updated 8 years ago
- Generates a detailed CSV file containing Sigma Rules statistics for each service or category, and each level, offering a holistic view of…☆10Dec 22, 2023Updated 2 years ago
- ☆23Jun 1, 2022Updated 4 years ago
- KQL queries for Microsoft Defender Advanced Hunting organized around the TTPs of the MITRE ATT&CK framework.☆25Nov 7, 2024Updated last year
- The Splunk Web Framework Toolkit☆12May 3, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆13Feb 17, 2022Updated 4 years ago
- An example of how to deploy a Detection as Code pipeline using Sigma Rules, Sigmac, Gitlab CI, and Splunk.☆62Mar 12, 2022Updated 4 years ago
- Maintained by the ANY.RUN team, this repository provides YARA rules to help detect and classify various malware families and other malici…☆32Oct 20, 2026Updated last week
- PowerShell wrapper for the SentinelOne API☆11Jan 4, 2025Updated last year
- 🍯 Fake SSH Server | 一个假的 SSH Server☆22Updated this week
- An application allowing users to explore, create, annotate, and share extensions of the MITRE ATT&CK® knowledge base. This repository con…☆443Updated this week
- ☆10Dec 19, 2024Updated last year
- Sensor Mappings to ATT&CK is a collection of resources to assist cyber defenders with understanding which sensors and events can help det…☆55Jun 21, 2025Updated last year
- ☆11Feb 9, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- An opinionated list of awesome Saleor tools, libraries, and resources. Inspired by awesome-python.☆15Nov 12, 2025Updated 11 months ago
- scripts to configure the Splunk Universal Forwarder in a locked down state☆40Dec 13, 2018Updated 7 years ago
- SMET : Semantic Mapping of CVE to ATT&CK and its Application to Cybersecurity☆55Sep 14, 2024Updated 2 years ago
- 🌌 Real-time threat detection for smart contracts☆10May 16, 2023Updated 3 years ago
- Splunk 7 Essentials - Third Edition, published by Packt☆17Jan 18, 2023Updated 3 years ago
- Exploit ConnectWise ScreenConnect (bypass authentication)☆12Feb 21, 2024Updated 2 years ago
- ICS/OT related Wireshark profiles + adding some other (IT or OT related) Open Source Wireshark Profiles☆19Mar 21, 2025Updated last year
- A collection of cloud malware & hacktools☆12Dec 22, 2023Updated 2 years ago
- Resources To Learn And Understand SIGMA Rules☆189Feb 14, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Event Query Router☆12Aug 9, 2019Updated 7 years ago
- Security Content for the PEAK Threat Hunting Framework☆51Aug 9, 2026Updated 2 months ago
- ☆10Sep 12, 2024Updated 2 years ago
- This directory contains random scripts from threat hunting or malware research☆11Feb 15, 2018Updated 8 years ago
- Queries for Carbon Black Response☆11Feb 11, 2020Updated 6 years ago
- Perform file-based malware scan on your on-prem servers with AWS☆14Oct 31, 2023Updated 2 years ago
- ☆30Feb 5, 2024Updated 2 years ago