palantir/alerting-detection-strategy-framework

A curated knowledge base to build, run and mature a SOC (including CSIRT).

Vocabulary for Event Recording and Incident Sharing (VERIS)

A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

MCP to help Defenders Detection Engineer Harder and Smarter

Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.

Splunk Security Content

Detect Tactics, Techniques & Combat Threats

An open source AI-native agentic SOC platform