A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
翻译 - 威胁猎人的剧本,有助于发展狩猎活动的技术和假设。
The Hunting ELK
翻译 - 狩猎麋鹿
Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
Sample queries for Advanced hunting in Microsoft 365 Defender
翻译 - Microsoft Threat Protection中的高级搜寻示例查询
Hunting queries and detections
Atomic Purple Team Framework and Lifecycle
Microsoft Sentinel SOC Operations
Collecting & Hunting for IOCs with gusto and style
Graph Visualization for windows event logs
Microsoft 365 Advanced Hunting Queries with hotlinks that plug the query right into your tenant.
#Awesome#yara detection rules for hunting with the threathunting-keywords project