
signatures
Community Detection Signature Build and Distribution Pipeline for YARA, Suricata, Snort and Sigma

Community Detection Signature Build and Distribution Pipeline for YARA, Suricata, Snort and Sigma

This repository contains a list of new remediation scripts.


Curated collection of Microsoft Sentinel KQL queries and tutorials for hunting threats, analyzing Azure AD sign-in logs, detecting anomalies, and…

The Sigma command line interface based on pySigma

Rules generated from our investigations.

Draw.io libraries for threat modeling diagrams

A repository that maps commonly used attacks using MSRPC protocols to ATT&CK

Audits Windows security settings against CIS, Microsoft, STIG, and BSI baselines, scores compliance, and applies hardening changes via registry or…

A curated list of smart contract attack vectors

Sigma rules from Joe Security

A repository to release detection rules to the public

Collection of YARA rules designed for usage through VirusTotal.com.

Some Threat Hunting queries useful for blue teamers
