cyb3rxp/awesome-soc

Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.

Awesome Security lists for SOC/CERT/CTI

🤖🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.

Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.

Tools and Techniques for Blue Team / Incident Response

Splunk Security Content

A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0

Cloud-native SIEM for intelligent security analytics for your entire enterprise.