alerting-detection-strategy-framework by palantir

A framework for developing alerting and detection strategies for incident response.

updated at Nov. 15, 2024, 8:58 a.m.

296 +1

689 +3

120 +1

loghub by logpai

A large collection of system log datasets for AI-driven log analytics [ISSRE'23]

updated at Nov. 15, 2024, 6:16 a.m.

59 +0

1,833 +11

602 +2

Threat-Hunting-With-Splunk by west-wind

Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise

updated at Nov. 15, 2024, 2:04 a.m.

3 +0

57 +1

8 +0

armory by anvilogic-forge

Anvilogic Forge

updated at Nov. 14, 2024, 9:50 p.m.

5 +0

86 +0

5 +0

detection-and-response-pipeline by 0x4D31

✨ A compilation of suggested tools/services for each component in a detection and response pipeline, along with real-world examples. The purpose is to create a reference hub for designing effective threat detection and response pipelines. 👷 🏗

updated at Nov. 11, 2024, 10:11 p.m.

13 +0

258 +3

23 +0

awesome-kubernetes-threat-detection by jatrost

A curated list of resources about detecting threats and defending Kubernetes systems.

updated at Nov. 9, 2024, 3:19 p.m.

11 +0

364 +0

33 +0

CIMLibrary by ExabeamLabs

CIM Library

updated at Oct. 23, 2024, 12:25 p.m.

0 +0

8 +0

3 +0

Content-Library-CIM2 by ExabeamLabs

None

updated at Oct. 22, 2024, 3:41 p.m.

1 +0

16 +0

3 +0