threat-detection

There are 6 repositories under threat-detection topic.

0x4D31 / awesome-threat-detection
✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️
awesome awesome-list threat-hunting security detection threat-detection incident-response
3328
DataDog / stratus-red-team
:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
aws adversary-emulation purple-team mitre-attack cloud-security cloud-native-security detection-engineering threat-detection security aws-security azure-security kubernetes-security gcp-security
Language:Go 1618
akto-api-security / akto
Proactive, Open source API security → API discovery, Testing in CI/CD, Test Library with 150+ Tests, Add custom tests, Sensitive data exposure
api-security api-discovery api-security-testing api-testing authentication authorization devsecops idor owasp-top-10 security security-testing sensitive-data-exposure threat-detection hacktoberfest hacktoberfest2023 devsecops-pipeline docker docker-compose react
Language:Java 817
Watcher
thalesgroup-cert / Watcher
Watcher - Open Source Cybersecurity Threat Hunting Platform. Developed with Django & React JS.
cybersecurity threat-hunting django reactjs rss-bridge misp thehive security incident-response threat-detection threat-intelligence nltk watcher certificate-transparency certstream osint osint-python webapp monitoring phishing
Language:Python 793
Threat-Hunting-and-Detection
Cyb3r-Monk / Threat-Hunting-and-Detection
Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).
cybersecurity defender-for-endpoint detection-engineering dfir kql kusto-language microsoft-sentinel threat-detection threat-hunting
Language:Jupyter Notebook 558
infosecB / awesome-detection-engineering
Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.
detection-engineering splunk mitre awesome-list awesome cybersecurity threat-detection
549
aws-samples / aws-security-workshops
A collection of the latest AWS Security workshops
aws security workshop threat-detection identity aws-iam amazon-guardduty lambda amazon-cognito aws-security aws-security-hub cloudwatch-events detect protect respond inspector
Language:Jupyter Notebook 427
cyb3rmik3 / KQL-threat-hunting-queries
A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 Defender).
kql kusto microsoft securitycenter sentinel kusto-query kusto-query-language microsoft-365 microsoft-365-defender microsoft-365-security microsoft-security microsoft-sentinel security threat-detection threat-hunt threat-hunting threat-detecting microsoft-xdr microsoftxdr
369
olafhartong / ATTACKdatamap
A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework
dfir mitre-attack threat-hunting threat-detection siem
Language:PowerShell 344
DataDog / threatest
Threatest is a CLI and Go framework for end-to-end testing threat detection rules.
continuous-security detection-engineering security-automation threat-detection
Language:Go 303
kunai-project / kunai
Threat-hunting tool for Linux
ebpf linux security-monitoring threat-detection threat-hunting
Language:Rust 261
jackaduma / SecBERT
pretrained BERT model for cyber security text, learned CyberSecurity Knowledge
cybersecurity security nlp bert bert-embeddings nlp-machine-learning deeplearning attention transformers transformer-encoder cyber-security security-automation apt machine-learning-security deep-learning-security cyber-threat-intelligence threat-intelligence threat-hunting threat-detection threat-analysis
Language:Python 132
ecstatic-nobel / Analyst-Arsenal
A toolkit for Security Researchers
osint cybersecurity python threat-intelligence threat-hunting threat-analysis malware-analysis certificate-transparency scanner threat-detection certstream webshell opendir defaced infosec
Language:Python 124
MFMokbel / Crawlector
Crawlector is a threat hunting framework designed for scanning websites for malicious objects.
malware-detection threat-hunting threat-detection
120
WebSecProbe
spyboy-productions / WebSecProbe
Bypass 403
bypass-403 header-injection historical-analysis threat-detection url-manipulation vulnerability-assessment web-application-security http-request-analysis payload-variations security-assessment-tool wayback-machine-integration web-security-audit web-vulnerability-detection access-403
Language:Jupyter Notebook 98
ine-labs / ThreatSeeker
ThreatSeeker: Threat Hunting via Windows Event Logs
evtx log-analysis sysmon threat threat-detection threat-intelligence windows
Language:Python 85
SyntheticSun
jonrau1 / SyntheticSun
SyntheticSun is a defense-in-depth security automation and monitoring framework which utilizes threat intelligence, machine learning, managed AWS security services and, serverless technologies to continuously prevent, detect and respond to threats.
threat-intelligence machine-learning anomaly-detection aws-security aws-serverless serverless automation geolocation threat-detection guardduty security-automation security-tools aws sagemaker incident-response kibana elasticsearch data-science data-visualization misp
Language:Python 74
swisscom / detections
Threat intelligence and threat detection indicators (IOC, IOA)
indicators-of-compromise indicators detection threat-detection
Language:YARA 51
Loginsoft-Research / detection-rules
Threat Detection & Anomaly Detection rules for popular open-source components
siem threat-detection sigma elasticsearch anomaly-detection threat-hunting splunk
48
infosecB / detection-as-code
An example of how to deploy a Detection as Code pipeline using Sigma Rules, Sigmac, Gitlab CI, and Splunk.
threat-detection cybersecurity detection-engineering blueteam
Language:Python 42
ThreatHunting-Keywords-sigma-rules
mthcht / ThreatHunting-Keywords-sigma-rules
Sigma detection rules for hunting with the threathunting-keywords project
blueteam detection-engineering detection-rules siem sigma-rules threat-detection threat-hunting threathunting dfir forensicartifacts mitre-attack
Language:Python 41
Truvis / Suricata_Threat-Hunting-Rules
Collection of Suricata rule sets that I use modified to my environments.
suricata suricata-rules suricata-rule snort snort-rules snort-rules-generate snort3 security threat-intelligence threat-hunting threat-detection threat-analysis threat-response threat-monitor threat-intel threat-grid network-security network-monitoring network-analysis security-awareness
36
0xN3utr0n / Kanis
Advanced threat detection solution for Linux.
ids malware antivirus linux rootkit threat-detection containers docker container-security yara-scanner yara endpoint-security
Language:Go 35
thremulation-station / thremulation-station
Small-scale threat emulation and detection range built on Elastic and Atomic Redteam.
atomicredteam elastic security threat-detection threat-hunting
Language:Shell 34
Detect-X-app
shoumikgoswami / Detect-X-app
Detect-X Automated Threat Detection by AI
baggage-detection xray-detection computer-vision threat-detection
Language:Jupyter Notebook 30
paulveillard / cybersecurity-threat-detection
An ongoing & curated collection of awesome software best practices and remediation techniques, libraries and frameworks, E-books and videos, Technical guidelines and important resources about Threat Detection & Hunting.
cybersecurity encryption-decryption malware-analysis malware-detection malware-development security-tools security-vulnerability threat-analysis threat-blocker threat-detection threat-detection-policy threat-explorer threat-hunting threat-intelligence threat-modeling threat-monitor threat-response
27
foretoken
domgolonka / foretoken
A blazing fast, highly customizable, modern-day defence tool using (in memory) SQL & REST/gRPC protocols.
security security-tools threats modern-threats security-automation threat-detection database restful-api grpc grpc-protocols vpn tor spam proxy regex fraud-scores regular-expression consul etcdv3 zookeeper
Language:Go 21
patternex / awesome-ml-for-threat-detection
A curated list of resources to deep dive into the intersection of applied machine learning and threat detection.
threat-detection machine-learning papers machine-learning-systems cybersecurity awesome-list machine-learning-operations applied-machine-learning
18
advanced-threat-research / Expert-Rules
security threat-detection
17
aptresearch / datasets
advanced-persistent-threat advanced-persistent-threat-data apt apt-data aptdata cyber-security dataset threat-detection
15
TheWatchList
SCS-Labs / TheWatchList
Threat Feeds, Threat lists, and regular lists of known IP ranges and domains. It updates every 4 hours.
threatview threat-intelligence threatintel threatintelligence threat-sharing threat threat-hunting threat-analysis threat-response threat-detection cyber-threat-coalition lists
13
ecstatic-nobel / Not-Anti-Virus
An attmept to block malware before AV scans it.
antivirus emotet malware phishing osweep posint aisle25 notav threat-hunting threat-detection blueteam automation cyber difr infosec osint
Language:JavaScript 11
TeMiroYteHasheo / The-Hunters-Framework
Project to Support The Hunter's Framework (THF)
threathunting threat-hunting threat-detection thf cybersecurity cybersecurity-education
11
anubhavsaxena14 / Threat-Detection-using-Sentiment-Analysis
Threat Detection System using Hybrid (Machine Learning + Lexical Analysis) learning Approach.
python numpy sentiment-analysis nltk-library lexical-analysis neural-networks threat-detection anaconda machine-learning hidden-layers lexicon spyder
Language:Python 9
gabrielcurrie / nist-cybersecurity-library
Technical cyber security resources across the NIST cyber security framework lifecycle
cybersecurity incident-response threat-detection monitoring windows
9
wisepythagoras / honeyshell
An SSH honeypot written entirely in Go.
go golang ssh ssh-server ssh-honeypot honeypot honeypots infosec cybersecurity cyber-security information-security threatintel threat-intelligence threat-hunting threat-sharing threat-analysis threat-detection threat-intel
Language:Go 7

threat-detection

0x4D31 / awesome-threat-detection

DataDog / stratus-red-team

akto-api-security / akto

thalesgroup-cert / Watcher

Cyb3r-Monk / Threat-Hunting-and-Detection

infosecB / awesome-detection-engineering

aws-samples / aws-security-workshops

cyb3rmik3 / KQL-threat-hunting-queries

olafhartong / ATTACKdatamap

DataDog / threatest

kunai-project / kunai

jackaduma / SecBERT

ecstatic-nobel / Analyst-Arsenal

MFMokbel / Crawlector

spyboy-productions / WebSecProbe

ine-labs / ThreatSeeker

jonrau1 / SyntheticSun

swisscom / detections

Loginsoft-Research / detection-rules

infosecB / detection-as-code

mthcht / ThreatHunting-Keywords-sigma-rules

Truvis / Suricata_Threat-Hunting-Rules

0xN3utr0n / Kanis

thremulation-station / thremulation-station

shoumikgoswami / Detect-X-app

paulveillard / cybersecurity-threat-detection

domgolonka / foretoken

patternex / awesome-ml-for-threat-detection

advanced-threat-research / Expert-Rules

aptresearch / datasets

SCS-Labs / TheWatchList

ecstatic-nobel / Not-Anti-Virus

TeMiroYteHasheo / The-Hunters-Framework

anubhavsaxena14 / Threat-Detection-using-Sentiment-Analysis

gabrielcurrie / nist-cybersecurity-library

wisepythagoras / honeyshell