Anvilogic Detection Armory
An open-source repository of cybersecurity detection rules and threat identifiers for security teams to enhance threat detection capabilities.
What is Anvilogic Detection Armory?
Detection Armory is an open-source repository of cybersecurity detection rules and threat identifiers originally developed for the Anvilogic Platform. It provides security teams with ready-to-use detection logic in YAML format to identify various cybersecurity threats, complete with MITRE ATT&CK mappings and comprehensive documentation. The project aims to enhance global cybersecurity measures by making advanced threat detection methodologies accessible without requiring proprietary platforms.
Security teams, threat hunters, SOC analysts, and cybersecurity professionals who need to implement or enhance threat detection capabilities in their environments. It's particularly valuable for organizations building or improving their security monitoring and incident response workflows.
Developers choose Detection Armory because it offers battle-tested detection logic from a commercial platform in an open-source, platform-agnostic format. The unique value lies in accessing sophisticated threat identifiers with MITRE ATT&CK mappings that can be adapted to various security tools and data sources, accelerating detection engineering efforts.
Overview
Anvilogic Forge
Use Cases
Best For
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
