Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise
updated at May 30, 2024, 2:52 p.m.
A curated list of resources about detecting threats and defending Kubernetes systems.
updated at June 11, 2024, 3:04 p.m.
Community Security Analytics provides a set of community-driven audit & threat queries for Google Cloud
updated at June 12, 2024, 2:47 p.m.
🚨ATTENTION🚨 The Security Stack Mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as an archive.
updated at June 20, 2024, 4:24 a.m.
A framework for developing alerting and detection strategies for incident response.
updated at June 20, 2024, 1:49 p.m.
✨ A compilation of suggested tools/services for each component in a detection and response pipeline, along with real-world examples. The purpose is to create a reference hub for designing effective threat detection and response pipelines. 👷 🏗
updated at June 20, 2024, 6:05 p.m.
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
updated at June 20, 2024, 7:37 p.m.
Collection of YARA-L 2.0 sample rules for the Chronicle Detection API
updated at June 20, 2024, 8:21 p.m.
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
updated at June 22, 2024, 8:11 p.m.