Windows Events Attack Samples
Repository Index
47,133 repositories indexed
1–13 of 13 · Most stars
Security sensor for realtime threat detection and protection
Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)
Splunk Security Content
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
Anvilogic Forge
Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise
Advanced Phishing Protection: Suricata rulesets open and free
Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation, and SIEM validation.
Sigma Queries turned into KQL for Defender using pysigma - Automated
TerraSigma - Modern Detection Engineering for the Cloud-Native SIEM Microsoft Sentinel