threat-hunting / awesome-threat-detection

Related projects: ⓘ

• brianreitz / awesome-blueteam
  A list of resources to build a information security team.
  ☆13Updated 3 years ago
• Cyb3r-Monk / Cheat-Sheets
  Cheat sheets for threat hunting, detection and other stuff.
  ☆31Updated last year
• bengoerz / PurpleTeamDocs
  ☆28Updated 3 years ago
• mattnotmax / DFIR-notes
  Random notes collected on the intertubes relating to DFIR
  ☆32Updated last year
• invictus-ir / Blue-team-app-Office-365-and-Azure
  ☆68Updated last year
• reversinglabs / reversinglabs-siem-rules
  A collection of various SIEM rules relating to malware family groups.
  ☆60Updated 3 months ago
• MHaggis / notes
  Full of public notes and Utilities
  ☆81Updated 3 weeks ago
• DefensiveOrigins / DO-LAB
  ☆42Updated 3 months ago
• malwarejake-public / conference-presentations
  Conference presentations
  ☆45Updated 10 months ago
• paladin316 / ThreatHunting
  This repo is where I store my Threat Hunting ideas/content
  ☆85Updated last year
• miladaslaner / AdvHuntingCheatSheet
  Microsoft Threat Protection Advance Hunting Cheat Sheet
  ☆76Updated 4 years ago
• MarkBaggett / 504lab
  Distribution of the SANS SEC504 Windows Cheat Sheet Lab
  ☆64Updated 4 years ago
• correlatedsecurity / SPEED-SIEM-Use-Case-Framework
  Repository for SPEED SIEM Use Case Framework
  ☆52Updated 4 years ago
• SentineLabs / S1QL-Queries
  ☆50Updated last year
• guardsight / gsvsoc_cybersecurity-incident-response-plan
  Cybersecurity Incident Response Plan
  ☆86Updated 3 years ago
• msraju / Incident-Response-Playbooks
  ☆40Updated last year
• elysiumsecurityltd / IRM
  Incident Response Methodologies (IRM), also called Incident Playbook, based on the work done by the CERT Societe General
  ☆23Updated 2 years ago
• Bert-JanP / SecScripts
  Security Scripts and Sources for daily usage.
  ☆44Updated last week
• reprise99 / 4688-sysmon
  ☆48Updated last year
• target / Threat-Hunting
  Detection of obfuscated Powershell commands
  ☆53Updated last year
• m4nbat / KustQueryLanguage_kql
  Cyber Defence related kusto queries for use in Azure Sentinel and Defender advanced hunting
  ☆54Updated this week
• biffalo / easy-wins-endpoint-defense
  Collection of scripts/resources/ideas for attack surface reduction and additional logging to enable better threat hunting on Windows endp…
  ☆38Updated 5 months ago
• threat-hunting / awesome-threat-intelligence
  A curated list of Awesome Threat Intelligence resources
  ☆46Updated 6 years ago
• svch0stz / velociraptor-detections
  ☆19Updated last year
• tobor88 / PowerShell-Blue-Team
  Collection of PowerShell functinos and scripts a Blue Teamer might use
  ☆82Updated 11 months ago
• pfpt-andrew / Rapid-Response-Reporting
  RRR (Rapid Response Reporting) is a collection of Incident Response Report objects. They are designed to help incident responders provid…
  ☆36Updated 2 years ago
• invictus-ir / o365_dataset
  A dataset containing Office 365 Unified Audit Logs for security research and detection
  ☆41Updated 2 years ago
• humio / security_monitoring
  ☆40Updated last year
• archanchoudhury / Detection-Rule-Dump
  This is the One Stop place where you can several Detection Rules which can help you to kick start your journey on SIEM, SOC work.
  ☆36Updated 3 years ago
• TheHive-Project / DigitalShadows2TH
  DigitalShadows Alert Feeder for TheHive, an Open Source and Free Security Incident Response Platform
  ☆35Updated 5 years ago