Splunk

SigmaPython

A generic and open signature format for describing log event detections, shareable across SIEM systems.

Sigma RulesPython

A generic and open signature format for describing log event detections, shareable across SIEM systems.

Splunk Security ContentPython

An open-source repository of security detections, analytic stories, and response playbooks mapped to MITRE ATT&CK for Splunk Enterprise Security.

HoneytrapGo

An extensible open-source framework for running, monitoring, and managing honeypots to detect and analyze cyber threats.

Detection Engineering

A curated list of resources, tools, and frameworks for detection engineering in cybersecurity.

Splunk ES Correlation Searches Best Practices | OpsTune

A collection of Splunk SPL queries and prototypes for threat hunting and detection engineering.

TangoShell

A Splunk-based platform for deploying honeypots and analyzing attacker sessions with intelligence dashboards and threat feeds.

Splunk

A curated collection of awesome apps, visualizations, and resources for the Splunk data platform.

Anvilogic Detection Armory

An open-source repository of cybersecurity detection rules and threat identifiers for security teams to enhance threat detection capabilities.

Detection Engineering with Splunk

A collection of Splunk SPL queries for detecting vulnerability exploits, malware, and MITRE ATT&CK TTPs in security logs.