Detection Engineering
A curated list of resources, tools, and frameworks for detection engineering in cybersecurity.
What is Detection Engineering?
Awesome Detection Engineering is a curated GitHub repository that aggregates resources, tools, and frameworks for detection engineering—a cybersecurity discipline focused on designing and implementing detective controls to identify malicious activity. It serves as a reference hub for security professionals building threat detection programs.
Detection engineers, threat hunters, security analysts, and SOC teams looking for practical resources to improve their organization's threat detection capabilities.
It saves time by compiling scattered detection engineering resources into a single, well-organized list, covering everything from foundational frameworks to ready-to-use detection rules and logging best practices.
Overview
Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.
Use Cases
Best For
- Security teams building a detection engineering program from scratch
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
