Popular repositories Loading

1. sublime-rules sublime-rules Public

   Forked from sublime-security/sublime-rules

   Sublime rules for email attack detection, prevention, and threat hunting.

   YAML

2. RedTeam-BlueTeam-Intrusion-Detection-v1 RedTeam-BlueTeam-Intrusion-Detection-v1 Public

   Simulated phishing-to-persistence attack using a fake Adobe updater, with full red team execution and blue team detection analysis.

   HTML

3. Detection-Engineering Detection-Engineering Public

   Detection Engineering and Threat Hunting content.

   YARA

4. sigma sigma Public

   Forked from SigmaHQ/sigma

   Main Sigma Rule Repository

   Python

5. AI-Assisted-SOC-Triage AI-Assisted-SOC-Triage Public

   AI-assisted triage workflow for SOC analysts. Queries Elasticsearch telemetry after Atomic Red Team tests and uses an LLM to identify suspicious artifacts, summarize attack behavior, and draft dete…