threat-detection · GitHub Topics

0x4D31 / awesome-threat-detection

#Awesome#✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️

Awesome Lists threat-hunting 安全 detection threat-detection incident-response

4.06 k

8 个月前

elastic / detection-rules

翻译 - Elastic Security中检测引擎的规则

threat-detection threat-hunting

Python 2.06 k

2 天前

DataDog / stratus-red-team

☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud

翻译 - ☁️ :zap：云的粒度、可操作的对手仿真。

Amazon Web Services adversary-emulation purple-team mitre-attack cloud-security cloud-native-security detection-engineering threat-detection 安全 aws-security azure-security kubernetes-security gcp-security

Go 1.94 k

9 天前

akto-api-security / akto

Proactive, Open source API security → API discovery, API Security Posture, Testing in CI/CD, Test Library with 1000+ Tests, Add custom tests, Sensitive data exposure

api-security api-discovery api-security-testing api-testing Authentication authorization devsecops idor owasp-top-10 安全 security-testing sensitive-data-exposure threat-detection Hacktoberfest hacktoberfest2023 devsecops-pipeline

Java 1.21 k

5 天前

infosecB / awesome-detection-engineering

#Awesome#Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying m...

detection-engineering splunk mitre Awesome Lists Cybersecurity threat-detection

934

2 个月前

thalesgroup-cert / Watcher

Watcher - Open Source Cybersecurity Threat Hunting Platform. Developed with Django & React JS.

翻译 - Watcher-开源网络安全威胁搜寻平台。用Django＆React JS开发。

Cybersecurity threat-hunting Django React rss-bridge misp thehive 安全 incident-response threat-detection threat-intelligence nltk watcher certificate-transparency OSINT osint-python Web app 监控 phishing

Python 894

6 天前

kunai-project / kunai

Threat-hunting tool for Linux

eBPF Linux security-monitoring threat-hunting threat-detection

Rust 768

16 天前

Cyb3r-Monk / Threat-Hunting-and-Detection

Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).

threat-hunting threat-detection Cybersecurity defender-for-endpoint detection-engineering dfir kql

Jupyter Notebook 711

3 个月前

cyb3rmik3 / KQL-threat-hunting-queries

A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 Defender).

kql Microsoft sentinel microsoft-365 安全 threat-detection threat-hunting

665

1 个月前

nianticlabs / venator

A flexible threat detection platform that simplifies rule management and deployment using K8s CronJob and Helm, but can also run standalone or with other job schedulers like Nomad.

threat-detection detection-engineering Go Kubernetes

Go 373

5 个月前

olafhartong / ATTACKdatamap

A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework

dfir mitre-attack threat-hunting threat-detection siem

PowerShell 350

4 年前

GoogleCloudPlatform / security-analytics

Community Security Analytics provides a set of community-driven audit & threat queries for Google Cloud

安全 Google 云 BigQuery chronicle audit-logs log-analytics Logging network-analysis threat-detection

Python 333

9 个月前

turbot / tailpipe

select * from logs; Tailpipe is an open source SIEM for instant log insights, powered by DuckDB. Analyze millions of events in seconds, right from your terminal.

duckdb tailpipe Amazon Web Services Azure detections DevOps forensics Google 云 incident-response Logging mitre-attack Open Source parquet siem threat-detection

Go 330

13 天前

DataDog / threatest

Threatest is a CLI and Go framework for end-to-end testing threat detection rules.

detection-engineering security-automation threat-detection

Go 326

1 年前