Security Operations

Awesome-ES

A curated collection of resources for Splunk Enterprise Security, including documentation, training, and integration tools.

Exabeam Common Information Model

A hierarchical framework defining the structure of security content across Exabeam products for event normalization and analysis.

TerraSigmaHCL

Automates conversion of Sigma rules to Terraform and Sentinel YAML for detection engineering in Microsoft Sentinel.

Sigma2KQLPython

Automatically converts Sigma detection rules to Kusto Query Language (KQL) for Microsoft Defender and Sentinel.