Popular repositories Loading

1. SigmaUI SigmaUI Public

   SIGMA UI is a free open-source application based on the Elastic stack and Sigma Converter (sigmac)

   Python 190 33

2. Uncoder_IO Uncoder_IO Public

   An IDE and translation engine for detection engineers and threat hunters. Be faster, write smarter, keep 100% privacy.

   Python 173 36

3. Roota Roota Public

   Roota is a public-domain language of threat detection and response that combines native queries from a SIEM, EDR, XDR, or Data Lake with standardized metadata and threat intelligence to enable auto…

   132 10

4. AIDR-Bastion AIDR-Bastion Public

   A comprehensive GenAI protection system designed to protect against malicious prompts, injection attacks, and harmful content. System incorporates multiple engines that operate in sequence to analy…

   Python 95 7

5. soc_workflow_app_ce soc_workflow_app_ce Public

   SOC Workflow App helps Security Analysts and Threat Hunters explore suspicious events, look into raw events arriving at the Elastic Stack, and view Saved Searches configured by teammates.

   JavaScript 94 25

6. the-prime-hunt the-prime-hunt Public

   A browser extension for threat hunting that provides one UI for different SIEMs/EDRs and simplifies investigation

   TypeScript 77 10