The Web Exploit Detector is a Node.js application used to detect possible infections, malicious code and suspicious files in web hosting environments
-
Updated
Jul 18, 2017 - JavaScript
The Web Exploit Detector is a Node.js application used to detect possible infections, malicious code and suspicious files in web hosting environments
Marble - the real time decision engine for fraud and AML
The Threat Hunting In Rapid Iterations (THIRI) Jupyter notebook is designed as a research aide to let you rapidly prototype threat hunting rules.
A free and open platform for detecting and preventing email attacks like BEC, malware, and credential phishing. Gain visibility and control, hunt for advanced threats, collaborate with the community, and write detections-as-code.
Sigma detection rules for hunting with the threathunting-keywords project
Microsoft Sentinel, Defender for Endpoint - KQL Detection Packs
Hunting Queries for Defender ATP
uberAgent configuration: UXM settings & ESA rules + checks
Files for the lab of Digital Communications at the University of Seville.
Check Sigma rules for easy-to-bypass whitelists to make them more robust (https://github.com/SigmaHQ/sigma)
Docker Container for Elastic Detection CLI
Add a description, image, and links to the detection-rules topic page so that developers can more easily learn about it.
To associate your repository with the detection-rules topic, visit your repo's landing page and select "manage topics."