Small and highly portable detection tests based on MITRE's ATT&CK.
- mitre
- mitre-attack
Repository Index
47,133 repositories indexed
1–13 of 13 · Most stars
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
- kubernetes
- security
- nsa
- mitre-attack
Automated Adversary Emulation Platform
- adversary-emulation
- caldera
- security-automation
- red-team
A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
- threat-hunting
- sysmon
- hunting-campaigns
- hypothesis
A repository of sysmon configuration modules
- sysmon
- dfir
- threat-hunting
- mitre-attack
Windows Events Attack Samples
- threat-hunting
- evtx
- windows-security
- mitre-attack
Security sensor for realtime threat detection and protection
An OpenID Connect reference implementation in Java on the Spring platform.
Modular file scanning/analysis framework
- python
- analytic-machines
- analysis-framework
- python-script
Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents
Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation, and SIEM validation.
Sigma Queries turned into KQL for Defender using pysigma - Automated
- detection-engineering
- kql
- microsoftsentinel
- mitre-attack
TerraSigma - Modern Detection Engineering for the Cloud-Native SIEM Microsoft Sentinel
- cybersecurity
- detection-engineering
- devops
- kql