AI-powered cybersecurity attack flow visualization tool using MITRE ATT&CK

Logging Made Easy (LME) is a no cost, open source platform that centralizes log collection, enhances threat detection, and enables real-time alerting, helping small to medium-sized organizations se…

Automation to assess the state of your M365 tenant against CISA's baselines

Active Directory Assessment and Privilege Escalation Script

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

Sharing Threat Hunting runbooks

A collection of resources for Threat Hunters

Interesting APT Report Collection And Some Special IOCs

A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

A curated Cyber "Security Orchestration, Automation and Response (SOAR)" awesome list.

OpenCTI Docker deployment helpers

PurpleLab is an efficient and readily deployable lab solution, providing a swift setup for cybersecurity professionals to test detection rules and undertake various security tasks, all accessible …

Collection of KQL queries