
detecttrace
Open-source detection engineering tool that traces security detections end to end and identifies the first failing stage.
defensive-toolsdevsecopsincident-response+5
1

Open-source detection engineering tool that traces security detections end to end and identifies the first failing stage.

Zeek package for tracking long connections to report them before they have completed.

Splunk SIEM lab simulating and detecting CVE-2021-34527 (PrintNightmare) exploitation using Sysmon, Windows Event logs, and custom SPL detection…

Blue-team SIEM lab: Wazuh 4.7.5 detecting 7 simulated attacks (SSH brute force, Slowloris DoS / CVE-2007-6750, web attacks) with real-time MITRE…