infosecB

awesome-detection-engineering

Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.

LOOBins

Living Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in "living off the land" macOS binaries and how they can be used by threat actors for malicious purposes.

awesome

😎 Awesome lists about all kinds of interesting topics

galah

Galah: an LLM-powered web honeypot using the OpenAI API.

full-stack-fastapi-template

Full stack, modern web application template. Using FastAPI, React, SQLModel, PostgreSQL, Docker, GitHub Actions, automatic HTTPS and more.

GTFOBins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

microsearch

auditd-ripper

Python CLI for normalizing, aggregrating, and decoding auditd logs.

generative-ai-for-beginners

12 Lessons, Get Started Building with Generative AI 🔗 https://microsoft.github.io/generative-ai-for-beginners/

advent-of-detect-2024

An detection engineering-specific variant of advent of code.

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

guarddog

:snake: :mag: GuardDog is a CLI tool to Identify malicious PyPI and npm packages

T480

notes and configs for linux on t480

pySigma

Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)

schemastore

A collection of JSON schema files including full API

infosecb

infosecb.github.io

pydantic-attack

mitreattack-python

A python module for working with ATT&CK

ocsf-schema

OCSF Schema

detection-as-code

An example of how to deploy a Detection as Code pipeline using Sigma Rules, Sigmac, Gitlab CI, and Splunk.

awesome-threat-detection

A curated list of awesome threat detection and hunting resources

pywordle

generate_attacknav_layer

A Python CLI utility for quickly converting a list or text file of MITRE ATT&CK technique IDs to a MITRE ATT&CK Navigator layer .JSON file.

spark

Apache Spark - A unified analytics engine for large-scale data processing

attack-navigator

Web app that provides basic navigation and annotation of ATT&CK matrices

security_content

Splunk Security Content

docker-splunk

Splunk Docker GitHub Repository

ipify-me

Python module/cli to get public IP address using ipify's free API.

shields

Concise, consistent, and legible badges in SVG and raster format