sigma by SigmaHQ

Main Sigma Rule Repository

created at Dec. 24, 2016, 9:48 a.m.

346 +1

8,369 +32

2,198 -2

elastalert by Yelp

Easy & Flexible Alerting With ElasticSearch

created at Nov. 24, 2014, 7:39 p.m.

244 +0

7,998 +2

1,734 +0

security_content by splunk

Splunk Security Content

created at Dec. 18, 2018, 9:14 p.m.

71 +0

1,293 +1

362 +1

Hunting-Queries-Detection-Rules by Bert-JanP

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

created at May 30, 2022, 5:28 p.m.

64 +1

1,258 +8

233 +0

detection-rules by chronicle

Collection of YARA-L 2.0 sample rules for the Chronicle Detection API

created at Jan. 19, 2021, 9:30 p.m.

38 +0

316 +0

76 +1

security-analytics by GoogleCloudPlatform

Community Security Analytics provides a set of community-driven audit & threat queries for Google Cloud

created at Jan. 11, 2022, 9:47 p.m.

27 +0

325 +1

69 +1

security-stack-mappings by center-for-threat-informed-defense

🚨ATTENTION🚨 The Security Stack Mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as an archive.

created at Nov. 18, 2020, 6:48 p.m.

86 -2

380 +0

63 -1

salo by splunk

Synthetic Adversarial Log Objects: A Framework for synthentic log generation

created at Oct. 26, 2021, 2:10 p.m.

8 +0

77 +0

8 +0