Cloud-native SIEM for intelligent security analytics for your entire enterprise.

A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

Interesting APT Report Collection And Some Special IOCs

Automation to assess the state of your M365 tenant against CISA's baselines

Collection of KQL queries

Logging Made Easy (LME) is a no cost, open source platform that centralizes log collection, enhances threat detection, and enables real-time alerting, helping small to medium-sized organizations se…

Active Directory Assessment and Privilege Escalation Script

A curated Cyber "Security Orchestration, Automation and Response (SOAR)" awesome list.

A collection of resources for Threat Hunters

PurpleLab is an efficient and readily deployable lab solution, providing a swift setup for cybersecurity professionals to test detection rules and undertake various security tasks, all accessible …

OpenCTI Docker deployment helpers

AI-powered cybersecurity attack flow visualization tool using MITRE ATT&CK

Sharing Threat Hunting runbooks

A repo to conduct vulnerability enrichment.