detection-engineering

Windows Events Attack Samples

翻译 - Windows 事件攻击示例

☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud

翻译 - ☁️ :zap：云的粒度、可操作的对手仿真。

Splunk Security Content

翻译 - Splunk 安全内容

#Awesome#Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying m...

PurpleSharp is a C# adversary simulation tool that executes adversary techniques with the purpose of generating attack telemetry in monitored Windows environments

翻译 - PurpleSharp是C＃对手模拟工具，该工具执行对手技术，目的是在受监视的Windows环境中生成攻击遥测

Pipelined Query Language

#Awesome#Awesome list of keywords and artifacts for Threat Hunting sessions