Pinned Loading

1. detectest detectest Public

   Python

2. sigma-to-eql-converter sigma-to-eql-converter Public

   A tool to automatically translate community Sigma rules (YAML) to Elastic Event Query Language (EQL) queries.

   Python

3. wmi-based-attack-simulation-elk-detection wmi-based-attack-simulation-elk-detection Public

   Simulates a WMI Persistent-based attack chain on Windows and detects it with behavioral EQL rules on Elastic SIEM. Covers MITRE ATT&CK, LOLBins, and system security labs.

   HTML

4. eBPF-based-runtime-security eBPF-based-runtime-security Public

   Real-time Kubernetes security monitoring with Tetragon, Kyverno, Prometheus & Grafana

   Shell