Security Detection

FireEye's Red Team Tool CountermeasuresYARA

Snort and YARA rules to detect attacks using FireEye's red team tools, released after their 2020 breach disclosure.

FireEye's Sunburst CountermeasuresYARA

Open-source detection rules for identifying SolarWinds SunBurst backdoor activities and related vulnerabilities across multiple security tools.

StrutsHoneypotPHP

Apache 2-based honeypot and detection module for detecting and blocking the Struts CVE-2017-5638 exploit.

Detection Engineering with Splunk

A collection of Splunk SPL queries for detecting vulnerability exploits, malware, and MITRE ATT&CK TTPs in security logs.

Sigma2SPLPython

Automatically converts Sigma detection rules into Splunk SPL queries for security monitoring and threat hunting.