CloudDefenseAI/falco_extended_rules

Falco rule repository

Cloud Native Runtime Security

Sovereign kubernetes security operations center. Real-time false positives tuning

Built-in Panther detection rules and policies

🔍🔍 Malware scanner for cloud-native, as part of CI/CD and at Runtime 🔍🔍

Production-ready KQL queries for Microsoft Defender XDR and Microsoft Sentinel. Focused on Threat Hunting, Detection Engineering, and MITRE ATT&CK mapping.

MCP to help Defenders Detection Engineer Harder and Smarter

KQL Queries. Microsoft Defender, Microsoft Sentinel

Main Sigma Rule Repository