newbie2soc,github

adversary_emulation_library

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.

awesome-chatgpt-prompts

This repo includes ChatGPT prompt curation to use ChatGPT better.

awesome-detection-engineering

A list of useful Detection Engineering-related resources.

awesome-incident-response

A curated list of tools for incident response

awesome-soar

A curated Cyber "Security Orchestration, Automation and Response (SOAR)" awesome list.

awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

awesome-yara

A curated list of awesome YARA rules, tools, and people.

azure-sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

azuresentinel_kql_queries

Code included as part of the MustLearnKQL blog series

cyber-sec-resources

An organized list of resources including tools, blog-posts and how-to tutorials compiled and created by SCSP community members.

detection-and-response-pipeline

✨ A compilation of suggested tools/services for each component in a detection and response pipeline, along with real-world examples. The purpose is to create a reference hub for designing effective threat detection and response pipelines. 👷 🏗