Security Operations

Awesome-ES

A curated collection of resources for Splunk Enterprise Security, including documentation, training, and integration tools.

Exabeam Common Information Model

A hierarchical framework defining the structure of security content across Exabeam products for event normalization and analysis.

Sigma2KQLPython

Automatically converts Sigma detection rules to Kusto Query Language (KQL) for Microsoft Defender and Sentinel.

TerraSigmaHCL

Automates conversion of Sigma rules to Terraform and Sentinel YAML for detection engineering in Microsoft Sentinel.