Online resources related to Detection Engineering. Detection rules, detection logic, attack samples, detection tests and emulation tools, logging configuration and best practices, event log references, resources, labs, data manipulation online tools, blogs, newsletters, good reads, books, trainings, podcasts, videos and twitter/x accounts.
☆183Aug 22, 2026Updated last month
Alternatives and similar repositories for awesome-detection-engineer
Users that are interested in awesome-detection-engineer are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Online resources related to SOC Analysts. Incident investigation reference material, blogs, newsletters, good reads, books, trainings, po…☆94Feb 14, 2026Updated 7 months ago
- Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation o…☆1,346Aug 3, 2026Updated last month
- Repository with Hunting and Detection Queries for Microsoft Sentinel and Microsoft Defender XDR☆17Jun 9, 2026Updated 3 months ago
- A framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concret…☆61Mar 5, 2026Updated 6 months ago
- how to strangle threats☆65Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆99Jan 7, 2026Updated 8 months ago
- Sigma rules to share with the community☆126Jan 29, 2025Updated last year
- A starter pack of resources to help you get started in Detection Engineering.☆196Jun 4, 2026Updated 3 months ago
- Detection Reliability And Precision Efficiency (DRAPE) is an index used to assess detection performance☆36Nov 17, 2025Updated 10 months ago
- Detection engineering template☆15Jul 24, 2025Updated last year
- Mapping of open-source detection rules and atomic tests.☆215Jul 15, 2026Updated 2 months ago
- Sentinel Logic Apps, Playbooks and Workbooks to automate enrichment, incident analysis and more.☆124Jan 18, 2026Updated 8 months ago
- Collection of different Azure/Entra focused solutions (Deployable templates, Function Apps, etc)☆81Apr 12, 2026Updated 5 months ago
- sKaleQL is an opinionated template repository for managing, executing, and organizing Kusto Query Language (KQL) queries against Azure Lo…☆21May 20, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Repository where I hold random detection and threat hunting queries that I come up with based on different sources of information (or eve…☆290Jun 23, 2026Updated 2 months ago
- Awesome list of keywords and artifacts for Threat Hunting sessions☆673Aug 4, 2025Updated last year
- KQL Queries. Microsoft Defender, Microsoft Sentinel☆933Updated this week
- An index of publicly available and open-source threat detection rulesets.☆140Apr 17, 2025Updated last year
- ResearchDev - XDR & SIEM Detection☆66Apr 16, 2025Updated last year
- Utilizing your Threat data from a MISP instance into CarbonBlack Response by exposing the data in the Threat Intelligence Feed.☆20May 25, 2022Updated 4 years ago
- Awesome Security lists for SOC/CERT/CTI☆1,917Updated this week
- PowerShell tools to help defenders hunt smarter, hunt harder.☆493Oct 29, 2025Updated 10 months ago
- Repository with supporting materials for Invictus Academy/Training☆45Jul 22, 2026Updated 2 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Set of SIGMA rules (>350) mapped to MITRE ATT&CK tactic and techniques☆443May 21, 2026Updated 4 months ago
- Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).☆826Aug 14, 2026Updated last month
- A small guide on Unknown/Orphaned SIDs and some PowerShell tools to help you get rid of them.☆21Apr 16, 2026Updated 5 months ago
- KQL Queries☆42Updated this week
- An opensource sigma conversion tool built using pysigma☆175Updated this week
- This is a collection of threat detection rules / rules engines that I have come across.☆300May 5, 2024Updated 2 years ago
- A repository of my own Sigma detection rules.☆166Nov 25, 2025Updated 9 months ago
- A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 D…☆798Jun 3, 2026Updated 3 months ago
- Sublime rules for email attack detection, prevention, and threat hunting.☆374Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- KustoHawk is a lightweight incident triage and response tool designed for effective incident response in Microsoft Defender XDR and Micro…☆159Apr 1, 2026Updated 5 months ago
- A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters …☆345Updated this week
- Repository documenting how Threat Intelligence and / or a Threat Intelligence Platform can prove its value to an organisation.☆54Oct 23, 2024Updated last year
- Convert Sigma rules to SIEM queries, directly in your browser.☆123Aug 19, 2026Updated last month
- Rulezet is an open-source web platform for sharing, evaluating, improving, and managing cybersecurity detection rules (YARA, Sigma, Suric…☆56Updated this week
- Cyber Threat Intelligence☆83Dec 7, 2025Updated 9 months ago
- Anvilogic Forge☆119Mar 31, 2026Updated 5 months ago