Awesome Incident Response
Section: Playbooks · Playbook to aid the development of techniques and hypothesis for hunting campaigns.
Entry
Appears in 4 awesome lists
Collection of hunting playbooks organized by MITRE ATT&CK technique, each including hypothesis, required data sources, analytical queries (Spark, Elastic), and sample datasets to validate detection logic before deploying to production.
Section: Playbooks · Playbook to aid the development of techniques and hypothesis for hunting campaigns.
Section: Detection Rules · A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
Section: Other Useful Repositories · A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns
Section: Threat Hunting · Collection of hunting playbooks organized by MITRE ATT&CK technique, each including hypothesis, required data sources, analytical queries (Spark, Elastic), and sample datasets to validate detection logic before deploying to production.
A list of awesome shell tools and resources, including libraries and scripts for enhancing the command-line experience.
In multiple languages – Free programming books organized into language-specific collections.
Reader and rewriter of EXIF informations that supports raw files.
An API key is a unique identifier that is used to authenticate requests associated with your project. Some developers might hardcode them or leave it on public shares.
Curated list of tools and resources related to the use of machine learning for cyber security
The "Cyber Swiss Army Knife" web application from GCHQ for encryption, encoding, compression, and data analysis. Provides a drag-and-drop interface for chaining operations including Base64, AES, RSA, hashing, and classical ciphers, with 36,000+ GitHub stars.
Checklist of the most important security countermeasures when designing, testing, and releasing your API.
Executable packing tools, research, and resources.