AI-powered cybersecurity attack flow visualization tool using MITRE ATT&CK

A repo to conduct vulnerability enrichment.

Logging Made Easy (LME) is a no cost, open source platform that centralizes log collection, enhances threat detection, and enables real-time alerting, helping small to medium-sized organizations se…

Automation to assess the state of your M365 tenant against CISA's baselines

Active Directory Assessment and Privilege Escalation Script

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

Sharing Threat Hunting runbooks

A collection of resources for Threat Hunters

Interesting APT Report Collection And Some Special IOCs

A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

A curated Cyber "Security Orchestration, Automation and Response (SOAR)" awesome list.

OpenCTI Docker deployment helpers

OpenCTI Docker HowTo with example file templates

PurpleLab is an efficient and readily deployable lab solution, providing a swift setup for cybersecurity professionals to test detection rules and undertake various security tasks, all accessible …

Collection of KQL queries