
detection-rules
Develop, validate, and publish SIEM detection rules for Elastic Security, with Python CLI tooling, KQL parsing, Kibana integration, and packaged…

Develop, validate, and publish SIEM detection rules for Elastic Security, with Python CLI tooling, KQL parsing, Kibana integration, and packaged…

YARA signature and IOC database for my scanners and tools

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

Automate stopping bad bots from accessing your server

Sigma-based detection rules, log queries, atomic tests, and response procedures for monitoring and threat hunting in GitLab environments.

The Sigma command line interface based on pySigma

VEDAS-Driven Autonomous Generation + Community Contributions of Suricata & Nuclei Rules for over 15k CVEs


This repository contains supplemental items including IOCs, and signatures discussed in Huntress blogposts, and other media.

A curated knowledge base to build, run and mature a SOC (including CSIRT).

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

This repository contains validated detection rules for adversary behaviors observed during APT29 simulation. Each rule was tested against the actual…

SPaT Attack Detection and Evaluation dataset

Covered CVEs: CVE-2026-28755, CVE-2026-42926, CVE-2026-9256, CVE-2026-42055, CVE-2026-42533

🛡️Awesome lists about all kinds of interesting topics of Wazuh XDR/SIEM

Offline browser extension providing defensive analysis and detection guidance for CVE-2026-20127, with packet visualization, IOC extraction, and…

Rules generated from our investigations.

TrustedSec Sysinternals Sysmon Community Guide