Windows Events Attack Samples
-
Updated
Jan 24, 2023 - HTML
Windows Events Attack Samples
☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud
Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
Splunk Security Content
Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP, FISMA, etc.), Frameworks, Threat Models, Encryption, and Benchmarks.
Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.
PurpleSharp is a C# adversary simulation tool that executes adversary techniques with the purpose of generating attack telemetry in monitored Windows environments
Pipelined Query Language
Awesome Security lists for SOC/CERT/CTI
Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).
A resource containing all the tools each ransomware gangs uses
Awesome list of keywords and artifacts for Threat Hunting sessions
Customizable Linux Persistence Tool for Security Research and Detection Engineering.
Misc Threat Hunting Resources
Threatest is a CLI and Go framework for end-to-end testing threat detection rules.
Resources To Learn And Understand SIGMA Rules
Generate datasets of cloud audit logs for common attacks
Signature engine for all your logs
Purpleteam scripts simulation & Detection - trigger events for SOC detections
Add a description, image, and links to the detection-engineering topic page so that developers can more easily learn about it.
To associate your repository with the detection-engineering topic, visit your repo's landing page and select "manage topics."