Splunk Security Content
-
Updated
Sep 9, 2024 - Python
Splunk Security Content
A pySigma wrapper to manage detection rules.
Updated Sigma2KQL script written by @CodeByHarri + Generating Analytics & Hunting Rules ready for Sentinel Deployment
Sigma detection rules for hunting with the threathunting-keywords project
A pySigma wrapper and langchain toolkit for automatic rule creation/translation
Automatic detection engineering technical state compliance
Machine learning notebooks using cybersecurity data
Cloud-DART is a comprehensive repository that provides Standard Operating Procedures (SOPs), Jupyter Notebooks, and code blocks for detection and response in cloud environments. This repository is designed to assist security professionals in automating and enhancing their cloud security posture.
Repo for my detection rules in system relative formatting
Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
🔭 Threat report analysis via LLM and Vector DB
De-facto parent tenant for Carbon Black Enterprise EDR
A POC to implement Detection-as-Code with Terraform and Sumo Logic.
SIEGMA - Transform Sigma rules into SIEM consumables
attack2jira automates the process of standing up a Jira environment that can be used to track and measure ATT&CK coverage
Research, Rules, Books, Tools and more basic stuff you can get anywhere
An example of how to deploy a Detection as Code pipeline using Sigma Rules, Sigmac, Gitlab CI, and Splunk.
A Python CLI utility for quickly converting a list or text file of MITRE ATT&CK technique IDs to a MITRE ATT&CK Navigator layer .JSON file.
Add a description, image, and links to the detection-engineering topic page so that developers can more easily learn about it.
To associate your repository with the detection-engineering topic, visit your repo's landing page and select "manage topics."