Tools

orlikoski/skadi

Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux

intezer/linux-explorer

Easy-to-use live forensics toolbox for Linux endpoints

sigmahq/sigma

Main Sigma Rule Repository

azure/azure-sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

mattnotmax/cyberchef-recipes

A list of cyber-chef recipes and curated links

tsale/edr-telemetry

This project aims to compare and evaluate the telemetry of various EDR products.

paulsec/awesome-windows-domain-hardening

A curated list of awesome Security Hardening techniques for Windows.

reprise99/sentinel-queries

Curated collection of Microsoft Sentinel KQL queries and tutorials for hunting threats, analyzing Azure AD sign-in logs, detecting anomalies, and…

trustedsec/sysmoncommunityguide

TrustedSec Sysinternals Sysmon Community Guide

otrf/ossem

Community-driven project for documenting, standardizing, and modeling security event logs to improve detection analytics and data normalization…

letsdefend/awesome-soc-analyst

Useful resources for SOC Analyst and SOC Analyst candidates.

mthcht/threathunting-keywords

Awesome list of keywords and artifacts for Threat Hunting sessions

tsale/awesome-dfir-skills

A curated collection of DFIR skills and workflows for InfoSec practitioners.

corelight/zeek-cheatsheets

Zeek Log Cheatsheets

joesecurity/sigma-rules

Sigma rules from Joe Security

the-dfir-report/sigma-rules

Rules generated from our investigations.

sigmahq/sigma-cli

The Sigma command line interface based on pySigma