Windows Events Attack Samples

Splunk Security Content

☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud

Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.

PurpleSharp is a C# adversary simulation tool that executes adversary techniques with the purpose of generating attack telemetry in monitored Windows environments

Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).

Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS

Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP, FISMA, etc.), Frameworks, Threat Models, Encryption, and Benchmarks.

Awesome Security lists for SOC/CERT/CTI

A resource containing all the tools each ransomware gangs uses

Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.

Misc Threat Hunting Resources

Awesome list of keywords and artifacts for Threat Hunting sessions

Customizable Linux Persistence Tool for Security Research and Detection Engineering.

attack2jira automates the process of standing up a Jira environment that can be used to track and measure ATT&CK coverage

Pointing cybersecurity teams to thousands of detection rules and offensive security tests aligned with common attacker techniques

Pipelined Query Language

Threatest is a CLI and Go framework for end-to-end testing threat detection rules.

SIEGMA - Transform Sigma rules into SIEM consumables

A Go implementation and parser for Sigma rules.