Repository navigation

threat-detection

Website
Wikipedia

0x4D31 / awesome-threat-detection

✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️

Awesome Lists threat-hunting 安全 detection threat-detection incident-response

4296

721

1 年前

elastic / detection-rules

threat-detection threat-hunting

Python

2389

591

25 分钟前

DataDog / stratus-red-team

☁ ⚡ Granular, Actionable Adversary Emulation for the Cloud

Amazon Web Services adversary-emulation purple-team mitre-attack cloud-security cloud-native-security detection-engineering threat-detection 安全 aws-security azure-security kubernetes-security gcp-security

2124

258

19 天前

akto-api-security / akto

Proactive, Open source API security → API discovery, API Security Posture, Testing in CI/CD, Test Library with 1000+ Tests, Add custom tests, Sensitive data exposure

api-security api-discovery api-security-testing api-testing Authentication Authorization devsecops idor owasp-top-10 安全 security-testing sensitive-data-exposure threat-detection Hacktoberfest hacktoberfest2023 devsecops-pipeline

Java

1371

254

1 小时前

infosecB / awesome-detection-engineering

Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.

detection-engineering splunk mitre Awesome Lists Cybersecurity threat-detection

1036

2 个月前

kunai-project / kunai

Threat-hunting tool for Linux

eBPF Linux security-monitoring threat-hunting threat-detection

Rust

965

2 天前

thalesgroup-cert / Watcher

Watcher - Open Source Cybersecurity Threat Hunting Platform. Developed with Django & React JS.

Cybersecurity threat-hunting Django React misp thehive 安全 incident-response threat-detection threat-intelligence nltk watcher certificate-transparency OSINT osint-python Web app 监控 phishing

Python

941

139

9 天前

Cyb3r-Monk / Threat-Hunting-and-Detection

Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).

threat-hunting threat-detection Cybersecurity defender-for-endpoint detection-engineering dfir kql

Jupyter Notebook

747

107

5 个月前

cyb3rmik3 / KQL-threat-hunting-queries

A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 Defender).

kql Microsoft sentinel microsoft-365 安全 threat-detection threat-hunting

720

15 天前

dev-lu / osint_toolkit

Open source platform for cyber security analysts with many features for threat intelligence and detection engineering.

Cybersecurity threat-detection threat-hunting threat-intelligence

JavaScript

705

114

2 天前

turbot / tailpipe

select * from logs; Tailpipe is an open source SIEM for instant log insights, powered by DuckDB. Analyze millions of events in seconds, right from your terminal.

duckdb tailpipe Amazon Web Services Azure detections DevOps forensics Google 云 incident-response Logging mitre-attack Open Source parquet siem threat-detection

474

2 小时前

nianticlabs / venator

A flexible threat detection platform that simplifies rule management and deployment using K8s CronJob and Helm, but can also run standalone or with other job schedulers like Nomad.

threat-detection detection-engineering Go Kubernetes

383

1 年前