#

detection-engineering

Here are 8 public repositories matching this topic...

sbousseaden / EVTX-ATTACK-SAMPLES

Windows Events Attack Samples

dfir dataset threat-hunting winlogbeat mitre-attack evtx windows-security detection-engineering

Updated Jan 24, 2023
HTML

lolc2.github.io

lolc2 / lolc2.github.io

lolC2 is a collection of C2 frameworks that leverage legitimate services to evade detection

pentest threat-intelligence c2 redteam living-off-the-land detection-engineering lolc2

Updated Jun 2, 2025
HTML

st0pp3r / awesome-detection-engineer

Online resources related to Detection Engineering. Detection rules, detection logic, attack samples, detection tests and emulation tools, logging configuration and best practices, event log references, resources, labs, data manipulation online tools, blogs, newsletters, good reads, books, trainings, podcasts, videos and twitter/x accounts.

security awesome detection awesome-list soc threat-detection detection-engineering cybesecurity

Updated Nov 25, 2025
HTML

M3NIX / sigmaio

simple webapp for converting sigma rules into siem queries using the pySigma library

splunk sigma detection-engineering pysigma

Updated Sep 1, 2023
HTML

sentrilite / sentrilite

Sentrilite is a Threat Detection-As-Code (DAC) for Hybrid/Multi Cloud Infrasturcture

linux kubernetes security security-audit cybersecurity threat-hunting ebpf observability security-tools threat-intelligence detection-rules edr threat-detection detection-engineering detection-as-code

Updated Dec 10, 2025
HTML

TTLNinja / madlibs

DNS sourced Mad Lib Game

dns malware-research information-security blueteam detection-engineering

Updated Jul 22, 2025
HTML

guisant17 / TerraSigma

🚀 Automate Sigma rule conversion to KQL and Terraform for Microsoft Sentinel, streamlining detection management with infrastructure-as-code.

python yaml devops terraform cybersecurity threat-hunting sigma mitre-attack kql detection-engineering microsoftsentinel

Updated Dec 17, 2025
HTML

sentrilite / windows

Sentrilite EDR/XDR for Windows: Detection-As-Code, Observability, Security & Live Telemetry with AI/LLM Insights

security monitoring xdr siem observability security-tools edr detection-engineering cybersecurity-tools detection-as-code

Updated Dec 15, 2025
HTML

Improve this page

Add a description, image, and links to the detection-engineering topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the detection-engineering topic, visit your repo's landing page and select "manage topics."