socfortress/Wazuh-Rules

Main Sigma Rule Repository

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

Elastic Security detection content for Endpoint

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

Splunk Security Content

A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️

A repository of sysmon configuration modules