detection-rules

There are 1 repository under detection-rules topic.

• marble

  checkmarble / marble

  Marble - the real time decision engine for fraud and AML

  amlcase-managementcompliance-automationcompliance-platformdecision-apidecision-makingdetection-rulesfinancial-servicesfraud-detectionmoney-launderingnocoderealtimeriskrule-basedrule-engine
  Language:HCL 160

• sublime-security / sublime-platform

  A free and open platform for detecting and preventing email attacks like BEC, malware, and credential phishing. Gain visibility and control, hunt for advanced threats, collaborate with the community, and write detections-as-code.

  phishingphishing-detectiondetection-rulesemail-securitysecuritysecurity-tools
  Language:Shell 160

• mandiant / thiri-notebook

  The Threat Hunting In Rapid Iterations (THIRI) Jupyter notebook is designed as a research aide to let you rapidly prototype threat hunting rules.

  detection-rulessnortthreat-huntingyara
  Language:Python 154

• polaris64 / web_exploit_detector

  The Web Exploit Detector is a Node.js application used to detect possible infections, malicious code and suspicious files in web hosting environments

  cmsdetection-rulesexploitsinfectionnodejsphpscannersecurity-auditsuspicious-fileswebwordpresswso-webshell
  Language:JavaScript 88

• 0xAnalyst / DefenderATPQueries

  Hunting Queries for Defender ATP

  defender-atpdetection-engineeringdetection-ruleskqlmicrosoftsentinelthreat-hunting
  70

• cylaris / awesomekql

  Microsoft Sentinel, Defender for Endpoint - KQL Detection Packs

  azuredetectiondetection-ruleskqlsiem
  50
• ThreatHunting-Keywords-sigma-rules

  mthcht / ThreatHunting-Keywords-sigma-rules

  Sigma detection rules for hunting with the threathunting-keywords project

  blueteamdetection-engineeringdetection-rulessiemsigma-rulesthreat-detectionthreat-huntingthreathuntingdfirforensicartifactsmitre-attack
  Language:Python 47

• Karneades / SigmaFilterCheck

  Check Sigma rules for easy-to-bypass whitelists to make them more robust (https://github.com/SigmaHQ/sigma)

  detection-rulessigmadetection
  Language:Python 15
• elastic-detection-cli

  austinsonger / elastic-detection-cli

  Docker Container for Elastic Detection CLI

  dockerdocker-composedocker-imagedocker-hubdocker-containerelasticelasticsearchdetectiondetection-rules
  Language:Dockerfile 8
• uberAgent-config

  vastlimits / uberAgent-config

  uberAgent configuration: UXM settings & ESA rules + checks

  detection-rulesendpoint-monitoringendpoint-security
  Language:PowerShell 2

• gapsc-us / labcomdig

  Files for the lab of Digital Communications at the University of Seville.

  pythonstatisticscommunicationsqam-modulationqam-demodulationdetection-rules
  Language:Jupyter Notebook 1