Main Sigma Rule Repository

Kernel-based Process Monitoring on Linux Endpoints for File System, TCP and UDP Networking Events and optionally DNS and HTTP Application Messages via eBPF Subsystem

Jube is an open-source software designed for monitoring transactions and events. It offers a range of powerful features including real-time data wrangling, artificial intelligence, decision making, and case management. Jube's exceptional performance is particularly evident in its application to fraud prevention and abuse detection scenarios.

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

SIEM Tactics, Techiques, and Procedures

Open source security data pipelines.

SEKOIA.IO Documentation - The Intelligence-Driven SaaS SIEM

Sigma detection rules for hunting with the threathunting-keywords project

Free and open log management

An IDE and translation engine for detection engineers and threat hunters. Be faster, write smarter, keep 100% privacy.

Projeto de rede segura, com implementação de Firewall, WAF, Segurança em camada com iptables, SIEM, Snort, como entrega de atividade do programa Desenvolve do Grupo Boticário em parceria com a Alura.

This repository contain configurations files for Arcsight Flexconnector Regex file Type designed for Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA)

CLI for Enterprise Application Access (EAA)

Awesome list of keywords and artifacts for Threat Hunting sessions

Customizable SIEM and XDR powered by Real-Time correlation and Threat Intelligence

pySigma backend for generating Grafana Loki/LogQL rules

The code powering RunReveal's documentation.

SIEM Logstash parsing for more than hundred technologies

Roota is a public-domain language of threat detection and response that combines native queries from a SIEM, EDR, XDR, or Data Lake with standardized metadata and threat intelligence to enable automated translation into other languages