beenuar / AiSOC

Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.

splunk / security_content

Splunk Security Content

huntbase-io / hunt-md

hunt.md: an open, plain-text format for threat hunts. Spec, examples and tooling.