awesome-kubernetes-threat-detection by jatrost

A curated list of resources about detecting threats and defending Kubernetes systems.

updated at Sept. 22, 2024, 2:32 p.m.

10 +0

357 +2

33 +0

loghub by logpai

A large collection of system log datasets for AI-driven log analytics [ISSRE'23]

updated at Sept. 22, 2024, 9:40 a.m.

57 +0

1,715 +8

587 +0

alerting-detection-strategy-framework by palantir

A framework for developing alerting and detection strategies for incident response.

updated at Sept. 21, 2024, 1:51 p.m.

280 +0

658 +6

115 +0

armory by anvilogic-forge

Anvilogic Forge

updated at Sept. 20, 2024, 3:55 p.m.

3 +0

81 +1

5 +0

CIMLibrary by ExabeamLabs

CIM Library

updated at Sept. 17, 2024, 2:44 p.m.

0 +0

9 +0

3 +0

detection-and-response-pipeline by 0x4D31

✨ A compilation of suggested tools/services for each component in a detection and response pipeline, along with real-world examples. The purpose is to create a reference hub for designing effective threat detection and response pipelines. 👷 🏗

updated at Sept. 11, 2024, 3:49 p.m.

12 +0

246 +0

20 +0

Threat-Hunting-With-Splunk by west-wind

Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise

updated at Aug. 18, 2024, 3:49 p.m.

3 +0

55 +0

8 +0

Content-Library-CIM2 by ExabeamLabs

None

updated at July 28, 2024, 5:45 a.m.

1 +0

16 +0

3 +0