wealthsimple / odef
This is a public template repository for the Open Detection Engineering Framework
☆24Updated 3 months ago
Alternatives and similar repositories for odef
Users that are interested in odef are comparing it to the libraries listed below
Sorting:
- An example of how to deploy a Detection as Code pipeline using Sigma Rules, Sigmac, Gitlab CI, and Splunk.☆55Updated 3 years ago
- A lab environment for learning about MSTICPy☆36Updated 2 years ago
- Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D. Azure and AWS terraform support.☆134Updated 2 years ago
- A preconfigured Velociraptor triage collector☆51Updated last week
- This directory features proven systems that demonstrate value to your threat-informed efforts using metrics.☆111Updated 5 months ago
- A community event for security researchers to share their favorite notebooks☆107Updated last year
- ☆88Updated 3 months ago
- Use Terraform to Provision Your Own Cloud-Based Remote Browsing Workstation☆25Updated last year
- ☆43Updated 2 years ago
- Anvilogic Forge☆103Updated this week
- Collects a listing of MITRE ATT&CK Techniques, then discovers Splunk ESCU detections for each technique☆67Updated last year
- Summiting the Pyramid is a research project focused on engineering cyber analytics to make adversary evasion more difficult. The research…☆38Updated last month
- Remote access and Antivirus Logging Database☆42Updated last year
- OSSEM Data Dictionaries☆59Updated 3 months ago
- Provides detection capabilities and log conversion to evtx or syslog capabilities☆53Updated 2 years ago
- Synthetic Adversarial Log Objects: A Framework for synthentic log generation☆81Updated last year
- ☆53Updated last month
- Recon Hunt Queries☆77Updated 3 years ago
- SigmaHQ pySigma CrowdStrike processing pipeline☆24Updated 7 months ago
- pocket guide for core detection engineering concepts☆28Updated 2 years ago
- Zerofox Alert Feeder for TheHive, an Open Source and Free Security Incident Response Platform☆36Updated 5 years ago
- ☆42Updated 4 years ago
- Easily create index of your SANS books☆16Updated 2 years ago
- Python library for threat intelligence☆86Updated 4 months ago
- Jupyter notebooks for threat hunting☆56Updated last month
- Repository that contains a set of purposefully erroneous Yara rules.☆51Updated last year
- A pySigma wrapper and langchain toolkit for automatic rule creation/translation☆80Updated this week
- The Infosec Community Definitive Guide to Jupyter Notebooks☆121Updated 4 years ago
- Random notes collected on the intertubes relating to DFIR☆32Updated last year
- Incident Response Methodologies (IRM), also called Incident Playbook, based on the work done by the CERT Societe General☆23Updated 3 years ago