threat-detection · GitHub Topics

0x4D31 / awesome-threat-detection

#Awesome#✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️

Awesome Lists threat-hunting 安全 detection threat-detection incident-response

4.2 k

1 年前

elastic / detection-rules

threat-detection threat-hunting

Python 2.33 k

4 天前

DataDog / stratus-red-team

☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud

Amazon Web Services adversary-emulation purple-team mitre-attack cloud-security cloud-native-security detection-engineering threat-detection 安全 aws-security azure-security kubernetes-security gcp-security

Go 2.04 k

5 天前

akto-api-security / akto

Proactive, Open source API security → API discovery, API Security Posture, Testing in CI/CD, Test Library with 1000+ Tests, Add custom tests, Sensitive data exposure

api-security api-discovery api-security-testing api-testing Authentication Authorization devsecops idor owasp-top-10 安全 security-testing sensitive-data-exposure threat-detection Hacktoberfest hacktoberfest2023 devsecops-pipeline

Java 1.32 k

4 天前

infosecB / awesome-detection-engineering

#Awesome#Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying m...

detection-engineering splunk mitre Awesome Lists Cybersecurity threat-detection

991

2 个月前

thalesgroup-cert / Watcher

Watcher - Open Source Cybersecurity Threat Hunting Platform. Developed with Django & React JS.

Cybersecurity threat-hunting Django React rss-bridge misp thehive 安全 incident-response threat-detection threat-intelligence nltk watcher certificate-transparency OSINT osint-python Web app 监控 phishing

Python 929

3 天前

kunai-project / kunai

Threat-hunting tool for Linux

eBPF Linux security-monitoring threat-hunting threat-detection

Rust 912

6 天前

Cyb3r-Monk / Threat-Hunting-and-Detection

Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).

threat-hunting threat-detection Cybersecurity defender-for-endpoint detection-engineering dfir kql

Jupyter Notebook 732

3 个月前

cyb3rmik3 / KQL-threat-hunting-queries

A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 Defender).

kql Microsoft sentinel microsoft-365 安全 threat-detection threat-hunting

695

1 个月前

turbot / tailpipe

select * from logs; Tailpipe is an open source SIEM for instant log insights, powered by DuckDB. Analyze millions of events in seconds, right from your terminal.

duckdb tailpipe Amazon Web Services Azure detections DevOps forensics Google 云 incident-response Logging mitre-attack Open Source parquet siem threat-detection

Go 435

6 天前

nianticlabs / venator

A flexible threat detection platform that simplifies rule management and deployment using K8s CronJob and Helm, but can also run standalone or with other job schedulers like Nomad.

threat-detection detection-engineering Go Kubernetes

Go 378

8 个月前