#detection-engineering (6 Repositories)
Ranked open-source repositories tagged with #detection-engineering, scored by pull request acceptance likelihood and maintainer engagement velocity.
15.9%
1.9h
6 repositories tagged #detection-engineering
Karib0u/rustinel
Open-source cross-platform endpoint detection engine for Windows, macOS, and Linux using ETW, ESF, eBPF, Sigma, YARA, IOCs, and ECS NDJSON alerts.
DataDog/threatest
Threatest is a CLI and Go framework for end-to-end testing threat detection rules.
MHaggis/Security-Detections-MCP
MCP to help Defenders Detection Engineer Harder and Smarter
st0pp3r/awesome-detection-engineer
Online resources related to Detection Engineering. Detection rules, detection logic, attack samples, detection tests and emulation tools, logging configuration and best practices, event log references, resources, labs, data manipulation online tools, blogs, newsletters, good reads, books, trainings, podcasts, videos and twitter/x accounts.
benscha/KQLAdvancedHunting
Production-ready KQL queries for Microsoft Defender XDR and Microsoft Sentinel. Focused on Threat Hunting, Detection Engineering, and MITRE ATT&CK mapping.
lolc2/lolc2.github.io
lolC2 is a collection of C2 frameworks that leverage legitimate services to evade detection