Explore live open-source projects and AI models.

DetectPack Forge turns plain-English behaviors or sample logs into production-ready detection packs — Sigma, KQL (Sentinel), SPL (Splunk) — plus tests and a response playbook, mapped to MITRE ATT&CK, fully powered by Gen AI.

Redis是什么 Redis是一个NOSQL，NOSQL有许多种，它们分为： 列存储，如：Hbase、Cassandra这种 文档存储，如：MongoDB（首推） key-value存储，如：Berkeley DB、MemcacheDB、Redis，其中Redis最强 图存储，这块基本不用，有：Neo4j、Versant XML存储，如：Berkeley DB Xml还有XBASE，ORACLE很早已经支持这种存储方式了 光知道这些NOSQL的名词是没有用的，关键在于要知道在哪种场景下选用哪种NOSQL才是我们真正要去掌握的。 我们这边说Redis就拿Redis说事吧，它能干什么呢？ ... Read more

A Microsoft Sentinel toolkit for generating and ingesting **realistic sample data** into Log Analytics tables via the Azure Monitor Logs Ingestion API. Supports both single-table ingestion and **multi-table attack scenarios** that simulate coordinated threat activity across correlated tables

MCP server for Microsoft Sentinel. Enables access to Sentinel logs, incidents, analytics, and Entra ID data via a modular, queryable interface. Strictly non-production. Designed for use with Claude and other LLMs.

local e=(function(n,e)return(n~=e);end)local e=(function(n,e)return(n>=e);end)local V=(function(n,e)return(n>e);end)local G=(function(n,e)return(n^e);end)local e=(function(n,e)return(n<=e);end)local a=(function(n,e)return(n==e);end)local e=(function(n,e)return(n<e);end)local N=(function(n,e)retur... Read more

A Smart Log4Shell/Log4j/CVE-2021-44228 Scanner

No description available from source.

Reworked assets for Azure Sentinel using Cisco Umbrella logs as source. Includes logstash config for Cisco Umbrella using Cisco managed AWS S3

LogSentinel是一个全栈的网络安全日志分析平台，提供实时威胁检测、行为异常分析和安全可视化功能。专为安全分析师（SOC）设计，支持高密度信息展示