ahmedkhlief/APT-Hunter

Rapidly Search and Hunt through Windows Forensic Artefacts

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

Microsoft Threat Intelligence Security Tools

Investigate malicious Windows logon by visualizing and analyzing Windows event log

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

Splunk Security Content

Main Sigma Rule Repository

A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.