Endpoint detection pipeline using Sysmon, Splunk, and Atomic Red Team. Learning detection engineering hands-on.
-
Updated
Mar 17, 2026
#
detection-engineerin
Here are 5 public repositories matching this topic...
A simulated Modbus TCP industrial process lab for exploring protocol-valid control actions, process impact, and investigation evidence.
python modbus critical-infrastructure ics-security modbus-tc ot-security detection-engineerin incident-respons threat-modelin sacda-security
-
Updated
Sep 18, 2026 - Python
Laboratório de Detection Engineering com Wazuh e Sysmon para detecção de execução do PowerShell mapeada à técnica MITRE ATT&CK T1059.001. | | Detection Engineering lab with Wazuh and Sysmon for PowerShell detection mapped to MITRE ATT&CK T1059.001.
powershell cybersecurity siem blue-team threat-hunt wazuh-integration detection-engineerin mitre-attack-
-
Updated
Jul 23, 2026
SOC-style home lab: centralized Linux log monitoring with SSH brute-force detection and automated alerting.
-
Updated
Mar 2, 2026
AI-powered SIEM-lite web app that ingests security logs, detects attacks with Sigma rules and ML anomaly detection, and summarizes incidents with an LLM. Maps findings to MITRE ATT&CK. Built with Quarkus & React.
react java security machine-learning typescript log-analysis cybersecurity siem mitre-attack quarkus sigma-rule llm detection-engineerin threat-detectio anomaly-detectio
-
Updated
Sep 18, 2026 - Java
Add this topic to your repo
To associate your repository with the detection-engineerin topic, visit your repo's landing page and select "manage topics."