detection-engineering topic

simple webapp for converting sigma rules into siem queries using the pySigma library

M3NIX

attack2jira automates the process of standing up a Jira environment that can be used to track and measure ATT&CK coverage

mvelazc0

PurpleSharp is a C# adversary simulation tool that executes adversary techniques with the purpose of generating attack telemetry in monitored Windows environments

mvelazc0

Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying m...

infosecB

Splunk Security Content

splunk

Windows Events Attack Samples

sbousseaden

Misc Threat Hunting Resources

sbousseaden

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

DataDog

Threatest is a CLI and Go framework for end-to-end testing threat detection rules.

DataDog

Pointing cybersecurity teams to thousands of detection rules and offensive security tests aligned with common attacker techniques

ControlCompass