A repository of curated datasets from various attacks to easily develop and test detections, specifically designed for validating detections in production SIEM installations using Splunk's Security Content Replay into streaming pipelines. Utilizes GitHub LFS for managing large files, with installation instructions provided for Mac users and other operating systems.
FEATURES
ALTERNATIVES
Sample detection rules and dashboards for Google Security Operations
Threat hunting tool leveraging Windows events for identifying outliers and suspicious behavior.
A free and open-source OSINT framework for gathering and analyzing data from various sources
Knowledge base workflow management dashboard for YARA rules and C2 artifacts.
SeaSponge is an accessible web-based threat modeling tool with a focus on accessibility, aesthetics, and intuitive user experience.
A modular malware collection and processing framework with support for various threat intelligence feeds.
An all-in-one email outreach platform for finding and connecting with professionals, with features for lead discovery, email verification, and cold email campaigns.
The Cybersecurity and Infrastructure Security Agency (CISA) is a government agency that provides alerts, advisories, and resources to help protect the United States' critical infrastructure from cyber threats.
PINNED
Fabric Platform by BlackStork
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Mandos Brief Newsletter
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.