salo by splunk

Synthetic Adversarial Log Objects: A Framework for synthentic log generation

created at Oct. 26, 2021, 2:10 p.m.

8 +0

77 +1

8 +0

detection-rules by chronicle

Collection of YARA-L 2.0 sample rules for the Chronicle Detection API

created at Jan. 19, 2021, 9:30 p.m.

37 +1

300 +4

72 +1

security-analytics by GoogleCloudPlatform

Community Security Analytics provides a set of community-driven audit & threat queries for Google Cloud

created at Jan. 11, 2022, 9:47 p.m.

27 -1

318 +1

68 -1

security-stack-mappings by center-for-threat-informed-defense

🚨ATTENTION🚨 The Security Stack Mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as an archive.

created at Nov. 18, 2020, 6:48 p.m.

86 +0

379 +0

64 +0

Hunting-Queries-Detection-Rules by Bert-JanP

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

created at May 30, 2022, 5:28 p.m.

61 +2

1,170 +6

221 +2

security_content by splunk

Splunk Security Content

created at Dec. 18, 2018, 9:14 p.m.

68 +0

1,255 +9

353 +3

elastalert by Yelp

Easy & Flexible Alerting With ElasticSearch

created at Nov. 24, 2014, 7:39 p.m.

246 +1

7,994 +2

1,735 +0

sigma by SigmaHQ

Main Sigma Rule Repository

created at Dec. 24, 2016, 9:48 a.m.

342 +2

8,132 +31

2,159 +7