Online resources related to Detection Engineering. Detection rules, detection logic, attack samples, detection tests and emulation tools, logging configuration and best practices, event log references, resources, labs, data manipulation online tools, blogs, newsletters, good reads, books, trainings, podcasts, videos and twitter/x accounts.
☆184Aug 22, 2026Updated last month
Alternatives and similar repositories for awesome-detection-engineer
Users that are interested in awesome-detection-engineer are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Online resources related to SOC Analysts. Incident investigation reference material, blogs, newsletters, good reads, books, trainings, po…☆95Feb 14, 2026Updated 7 months ago
- Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation o…☆1,357Updated this week
- Repository with Hunting and Detection Queries for Microsoft Sentinel and Microsoft Defender XDR☆17Jun 9, 2026Updated 4 months ago
- A framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concret…☆64Sep 28, 2026Updated 2 weeks ago
- how to strangle threats☆67Oct 6, 2026Updated last week
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- ☆99Jan 7, 2026Updated 9 months ago
- Sigma rules to share with the community☆126Jan 29, 2025Updated last year
- A starter pack of resources to help you get started in Detection Engineering.☆197Jun 4, 2026Updated 4 months ago
- Detection Reliability And Precision Efficiency (DRAPE) is an index used to assess detection performance☆36Nov 17, 2025Updated 10 months ago
- Detection engineering template☆15Jul 24, 2025Updated last year
- Mapping of open-source detection rules and atomic tests.☆217Jul 15, 2026Updated 2 months ago
- Sentinel Logic Apps, Playbooks and Workbooks to automate enrichment, incident analysis and more.☆124Jan 18, 2026Updated 8 months ago
- Collection of different Azure/Entra focused solutions (Deployable templates, Function Apps, etc)☆81Apr 12, 2026Updated 6 months ago
- sKaleQL is an opinionated template repository for managing, executing, and organizing Kusto Query Language (KQL) queries against Azure Lo…☆20May 20, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Repository where I hold random detection and threat hunting queries that I come up with based on different sources of information (or eve…☆289Jun 23, 2026Updated 3 months ago
- Awesome list of keywords and artifacts for Threat Hunting sessions☆676Aug 4, 2025Updated last year
- KQL Queries. Microsoft Defender, Microsoft Sentinel☆934Oct 4, 2026Updated last week
- An index of publicly available and open-source threat detection rulesets.☆141Apr 17, 2025Updated last year
- ResearchDev - XDR & SIEM Detection☆66Apr 16, 2025Updated last year
- Awesome Security lists for SOC/CERT/CTI☆1,935Updated this week
- Utilizing your Threat data from a MISP instance into CarbonBlack Response by exposing the data in the Threat Intelligence Feed.☆20May 25, 2022Updated 4 years ago
- PowerShell tools to help defenders hunt smarter, hunt harder.☆490Oct 29, 2025Updated 11 months ago
- Repository with supporting materials for Invictus Academy/Training☆45Jul 22, 2026Updated 2 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Set of SIGMA rules (>350) mapped to MITRE ATT&CK tactic and techniques☆447May 21, 2026Updated 4 months ago
- A small guide on Unknown/Orphaned SIDs and some PowerShell tools to help you get rid of them.☆21Apr 16, 2026Updated 5 months ago
- KQL Queries☆43Oct 2, 2026Updated last week
- An opensource sigma conversion tool built using pysigma☆175Oct 5, 2026Updated last week
- This is a collection of threat detection rules / rules engines that I have come across.☆301May 5, 2024Updated 2 years ago
- A repository of my own Sigma detection rules.☆167Nov 25, 2025Updated 10 months ago
- A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 D…☆799Updated this week
- Sublime rules for email attack detection, prevention, and threat hunting.☆378Updated this week
- KustoHawk is a lightweight incident triage and response tool designed for effective incident response in Microsoft Defender XDR and Micro…☆159Apr 1, 2026Updated 6 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters …☆355Updated this week
- Repository documenting how Threat Intelligence and / or a Threat Intelligence Platform can prove its value to an organisation.☆54Oct 23, 2024Updated last year
- Convert Sigma rules to SIEM queries, directly in your browser.☆123Aug 19, 2026Updated last month
- Rulezet is an open-source web platform for sharing, evaluating, improving, and managing cybersecurity detection rules (YARA, Sigma, Suric…☆57Updated this week
- Cyber Threat Intelligence☆83Dec 7, 2025Updated 10 months ago
- Anvilogic Forge☆119Mar 31, 2026Updated 6 months ago
- Community-driven PowerShell detection indicators☆45Jan 27, 2026Updated 8 months ago