rabbitstack / fibratus
Security sensor for realtime threat detection and protection
rabbitstack / fibratus
DataDog / stratus-red-team
:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
beenuar / AiSOC
Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.
Asymptote-Labs / agent-beacon
The cross-harness, self-improving memory layer for AI agents. Join our community: https://discord.com/invite/zdNChS2fBu
mthcht / awesome-lists
Awesome Security lists for SOC/CERT/CTI
cyb3rxp / awesome-soc
A curated knowledge base to build, run and mature a SOC (including CSIRT).
jiwoochris / artex-global
ARTEX νκ΅μ΄ν Β· AI μμ¨ μΉ¨ν¬ ν μ€νΈ νλ μμν¬(upstream: Autumn-27/ARTEX, AGPL-3.0)
splunk / security_content
Splunk Security Content
infosecB / awesome-detection-engineering
Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.
Karib0u / rustinel
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
bdg9412 / artex-ko-plus
ARTEX νκ΅μ΄ν Β·AI κΈ°λ° μΉ¨ν΄μ¬κ³ λμ κΈ°λ₯ μΆκ° (upstream: Autumn-27/ARTEX, AGPL-3.0)
Adversarial-Detection-Engineering / adeskills
Adversarial Detection Engineering knowledge base β ADE taxonomy, worked technique files, platform bug patterns, mitigations, and purple-team scoping tooling.
joshuagodwin7929 / Purple-Team-Automation
Automated adversary emulation (Caldera) against an AD lab to validate Sigma detection coverage and map results to MITRE ATT&CK.
huntbase-io / hunt-md
hunt.md: an open, plain-text format for threat hunts. Spec, examples and tooling.
M-med / Active-Directory-Simulation-Attack-
A Purple Team lab simulating Active Directory attacks (Kerberoasting, BloodHound, lateral movement) and implementing defensive hardening (gMSA, tiering, LLMNR/NetBIOS disabling) with Wazuh SIEM detection rules mapped to MITRE ATT&CK.