A curated repository of Splunk detection rules, ready to import into Splunk Enterprise or Splunk Cloud. This repo is intended for SOC teams and security engineers to detect common adversary behaviors, ...
This repository contains a collection of Threat Hunting Queries categorized by vendors and technologies. It is designed to help security analysts, threat hunters, and detection engineers quickly find ...