infosecB

awesome-detection-engineering

Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.

LOOBins

Living Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in "living off the land" macOS binaries and how they can be used by threat actors for malicious purposes.

detection-as-code

An example of how to deploy a Detection as Code pipeline using Sigma Rules, Sigmac, Gitlab CI, and Splunk.

generate_attacknav_layer

A Python CLI utility for quickly converting a list or text file of MITRE ATT&CK technique IDs to a MITRE ATT&CK Navigator layer .JSON file.

awesome-threat-detection

A curated list of awesome threat detection and hunting resources

auditd-ripper

Python CLI for normalizing, aggregrating, and decoding auditd logs.

security_content

Splunk Security Content

pywordle

advent-of-detect-2024

An detection engineering-specific variant of advent of code.

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

attack-navigator

Web app that provides basic navigation and annotation of ATT&CK matrices

awesome

😎 Awesome lists about all kinds of interesting topics

docker-splunk

Splunk Docker GitHub Repository

full-stack-fastapi-template

Full stack, modern web application template. Using FastAPI, React, SQLModel, PostgreSQL, Docker, GitHub Actions, automatic HTTPS and more.

galah

Galah: an LLM-powered web honeypot using the OpenAI API.

generative-ai-for-beginners

12 Lessons, Get Started Building with Generative AI 🔗 https://microsoft.github.io/generative-ai-for-beginners/

GTFOBins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

guarddog

:snake: :mag: GuardDog is a CLI tool to Identify malicious PyPI and npm packages

infosecb

infosecb.github.io

ipify-me

Python module/cli to get public IP address using ipify's free API.

microsearch

mitreattack-python

A python module for working with ATT&CK

ocsf-schema

OCSF Schema

pydantic-attack

pySigma

Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)

schemastore

A collection of JSON schema files including full API

shields

Concise, consistent, and legible badges in SVG and raster format

spark

Apache Spark - A unified analytics engine for large-scale data processing

T480

notes and configs for linux on t480