Awesome Threat Detection and Hunting

A curated list of awesome threat detection and hunting resources

Contents

• Threat Detection and Hunting
  • Tools
  • Frameworks
  • Resources
  • Videos
  • Courses
• Contribute
• License

Tools

• HELK: A Hunting ELK (Elasticsearch, Logstash, Kibana) with advanced analytic capabilities.
• osquery: An operating system instrumentation framework for Windows, OS X (macOS), Linux, and FreeBSD. It exposes an operating system as a high-performance relational database.

Frameworks

• MITRE ATT&CK: A curated knowledge base and model for cyber adversary behavior, reflecting the various phases of an adversary’s lifecycle and the platforms they are known to target.

Resources

Videos

Courses

Contribute

Contributions welcome! Read the contribution guidelines first.

License

To the extent possible under law, Adel "0x4D31" Karimi has waived all copyright and related or neighboring rights to this work.