Daemon to ban hosts that cause multiple authentication errors
Repository Index
47,133 repositories indexed
1–6 of 6 · Most stars
Main Sigma Rule Repository
Malicious traffic detection system
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
Splunk Security Content
- splunk
- detection
- engineering
- responses