sentinel-sigma-rules — born-clean snapshot of the decommissioned Overwatch AI-agent platform - Sentinel-PoC/sentinel-sigma-rules

Sigma-Anchored Node Test Apparatus. Contribute to mwaddip/santa development by creating an account on GitHub.

ITRE ATT&CK-mapped Sigma detection rules with Splunk, Sentinel & Elastic conversions - seyifalode-cmd/sigma-detection-rules

A pySigma wrapper to manage detection rules. Contribute to certeu/droid development by creating an account on GitHub.

Testing first React app for Sigma Computing. Contribute to emanmontanez/piechart-sigma-plugin development by creating an account on GitHub.

Contribute to bangsv/soc-detection-rules development by creating an account on GitHub.

The purpose of this repository is to try to propose yara/sigma/suricata rules for hunting offensive action perform on a system base on pentester cheatsheet. it's a sandbox for me... - 0xSee...

Contribute to uradhere05/SigmaWarehouseGame development by creating an account on GitHub.

This is my main repo for SIGMA, YARA, KQL and other types of query rules for your siems and XDRs! - remotecodeexec/Detections

Validate Flipper Zero BadUSB and HID attack detections using proven payloads, SIGMA rules, KQL queries, and forensic artifacts for end-to-end security testing. - Sensitivitymotive406/flipper-purple...

Contribute to zendannyy/sigma-rules development by creating an account on GitHub.

Detection rules written in Sigma format. Contribute to kruchkovnik15-dot/sigma-rules development by creating an account on GitHub.

Useful Sigma SIEM Detection Rules for SecurityOnion, Wazuh and more ... - C2RT/Sigma

Aradbase-Sigma is a repository containing behavior-based Sigma rules developed from Aradbase-YARA malware detection research. - bay-ar4fah/Aradbase-sigma

Full network/system penetration test of Metasploitable 2 — recon → root compromise (Samba RCE, ingreslock, MySQL/PostgreSQL default creds) → post-exploitation, with reports, per-finding write-ups, ...

Python library to parse and convert Sigma rules into queries (and whatever else you could imagine) - SigmaHQ/pySigma

A local-first Detection Intelligence & Entity Correlation Engine that transforms Sigma rule matches into explainable attack-chain narratives with entity risk tracking, behavioral correlatio...

Detection-as-code: Sigma, Falco, and Panther rules with pytest validation and per-rule decision documentation. - ryoshu404/pydetect

Search artifact paths, build collection scripts, and convert Sigma rules. All in one place. - LasCC/DFIRHub

Convert Sigma rules to SIEM queries, directly in your browser. - northsh/detection.studio