Resources
Hunting-Queries-Detection-Rules
Bert-JanP/Hunting-Queries-Detection-Rules
A curated collection of KQL threat-hunting and detection queries for Microsoft Defender and Sentinel, organized by MITRE ATT&CK tactics and products.
Topics
Related projects
chainsaw3.7kChainsaw is a fast Rust command-line tool for threat hunting through Windows forensic artefacts, applying Sigma rules to event logs and analysing MFT and SRUM data.
chainsaw3.7kChainsaw is a fast, standalone CLI for Windows forensic triage. It searches event logs and MFT artefacts, applies Sigma and custom detection rules, and builds timelines for threat hunting and incident response.
techniques10.3kA curated index of deep-learning techniques for satellite and aerial imagery, organizing external repos and papers by classification, segmentation and detection tasks.
my-arsenal-of-aws-security-tools9.5kA curated list of open source AWS security tools organized into defensive, offensive, auditing, digital forensics and incident response, and training categories for security practitioners.
ai-system-design-guide4.2kA living interview-ready study guide for production AI systems, covering RAG, agents, evals, models and real-world case studies with practical patterns.
123063.8kA high-fidelity 12306 railway ticketing system built with Spring Boot and Spring Cloud, positioned as a learning project for distributed systems.