Joe Lopes's starred repositories
awesome-detection-engineering
Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.
awesome-threat-intelligence
A curated list of Awesome Threat Intelligence resources
awesome-malware-analysis
Defund the Police.
EDR-Telemetry
This project aims to compare and evaluate the telemetry of various EDR products.
Practical-Threat-Detection-Engineering
Practical Threat Detection Engineering, Published by Packt
atomic-red-team
Small and highly portable detection tests based on MITRE's ATT&CK.
attack-powered-suit
ATT&CK Powered Suit is a browser extension that puts the complete MITRE ATT&CK® knowledge base at your fingertips with text search, context menus, and ATT&CK Navigator integration.
cti-stix2-json-schemas
OASIS TC Open Repository: Non-normative schemas and examples for STIX 2
sigma-specification
Sigma rule specification
aws-customer-playbook-framework
This repository provides sample templates for security playbooks against various scenarios when using Amazon Web Services.
nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.
malwoverview
Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, InQuest and it is able to scan Android devices against VT.
pingcastle
PingCastle - Get Active Directory Security at 80% in 20% of the time