Repository navigation

threat-detection

Website
Wikipedia

0x4D31 / awesome-threat-detection

✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️

Awesome Lists threat-hunting 安全 detection threat-detection incident-response

4340

722

1 年前

elastic / detection-rules

threat-detection threat-hunting

Python

2418

600

1 天前

DataDog / stratus-red-team

☁ ⚡ Granular, Actionable Adversary Emulation for the Cloud

Amazon Web Services adversary-emulation purple-team mitre-attack cloud-security cloud-native-security detection-engineering threat-detection 安全 aws-security azure-security kubernetes-security gcp-security

2161

264

3 天前

akto-api-security / akto

Proactive, Open source API security → API discovery, API Security Posture, Testing in CI/CD, Test Library with 1000+ Tests, Add custom tests, Sensitive data exposure

api-security api-discovery api-security-testing api-testing Authentication Authorization devsecops idor owasp-top-10 安全 security-testing sensitive-data-exposure threat-detection Hacktoberfest hacktoberfest2023 devsecops-pipeline

Java

1386

260

2 天前

infosecB / awesome-detection-engineering

Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.

detection-engineering splunk mitre Awesome Lists Cybersecurity threat-detection

1064

103

3 个月前

thalesgroup-cert / Watcher

Watcher - Open Source Cybersecurity Threat Hunting Platform. Developed with Django & React JS.

Cybersecurity threat-hunting Django React misp thehive 安全 incident-response threat-detection threat-intelligence nltk watcher certificate-transparency OSINT osint-python Web app 监控 phishing

Python

1001

149

2 天前

kunai-project / kunai

Threat-hunting tool for Linux

eBPF Linux security-monitoring threat-hunting threat-detection

Rust

982

2 个月前

Cyb3r-Monk / Threat-Hunting-and-Detection

Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).

threat-hunting threat-detection Cybersecurity defender-for-endpoint detection-engineering dfir kql

Jupyter Notebook

767

111

20 小时前

cyb3rmik3 / KQL-threat-hunting-queries

A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 Defender).

kql Microsoft sentinel microsoft-365 安全 threat-detection threat-hunting

733

1 个月前

dev-lu / osint_toolkit

Open source platform for cyber security analysts with many features for threat intelligence and detection engineering.

Cybersecurity threat-detection threat-hunting threat-intelligence

JavaScript

722

117

2 个月前

turbot / tailpipe

select * from logs; Tailpipe is an open source SIEM for instant log insights, powered by DuckDB. Analyze millions of events in seconds, right from your terminal.

duckdb tailpipe Amazon Web Services Azure detections DevOps forensics Google 云 incident-response Logging mitre-attack Open Source parquet siem threat-detection

501

10 小时前

nianticlabs / venator

A flexible threat detection platform that simplifies rule management and deployment using K8s CronJob and Helm, but can also run standalone or with other job schedulers like Nomad.

threat-detection detection-engineering Go Kubernetes

382

1 年前