A collection of files with indicators supporting social media posts from Palo Alto Network's Unit 42 team to disseminate timely threat intelligence.

Proof-of-concept script to leverage the PAN-OS GlobalProtect authentication bypass CVE-2026-0257

Online resources related to Detection Engineering. Detection rules, detection logic, attack samples, detection tests and emulation tools, logging configuration and best practices, event log refere…

Online resources related to SOC Analysts. Incident investigation reference material, blogs, newsletters, good reads, books, trainings, podcasts, Twitter/X accounts and a set of tools relevant to th…

🏴‍☠️💰 Another Ransomware gang tracker

Repository created to share information about tactics, techniques and procedures used by threat actors. Initially with ransomware groups and evolving to other types of threats.

Create rule coverage that closes the gaps.

Sigma rule specification

Vulnerability-Lookup facilitates quick correlation of vulnerabilities from various sources, independent of vulnerability IDs, and streamlines the management of Coordinated Vulnerability Disclosure …

pySigma Splunk backend

Automatically created C2 Feeds

Explanation and full RCE PoC for CVE-2025-55182

High Fidelity Detection Mechanism for RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)

An opensource sigma conversion tool built using pysigma

Splunk Security Content

Blazing fast GraphQL discovery & fingerprinting toolbox.

Hands-on secure code review training: learn to find vulnerabilities in Flask, Django, FastAPI through production-quality examples. Whitebox pentesting for modern web frameworks.

Sources

Detection for CVE-2025-10035

A library for detecting known secrets across many web frameworks

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

Tool to find common vulnerabilities in cryptographic public keys

SSHamble: Unexpected Exposures in SSH

Database of private SSL/SSH keys for embedded devices

Private keys that have become public ...

Dissect triage scripts for Citrix NetScaler devices

Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifyin…

An index of publicly available and open-source threat detection rulesets.