Tools/Detection Engineering

Detection Engineering

Sigma, YARA, SIEM content, rule testing, coverage mapping, and detection-as-code workflows.

19listings

19 of 19 listings · page 1 of 2

CrowdStrikeFeatured

Endpoint, cloud, identity, and threat intelligence platform.

Security VendorsThreat IntelligenceDetection Engineering#edr#threat-intelligence#incident-response

Security vendor platformEnterprise

NucleiFeatured

Fast template-based vulnerability scanning.

Vulnerability ManagementDetection EngineeringAttack Surface#templates#scanner#exposure

Vulnerability scannerOpen-source

Lightweight static analysis.

Vulnerability ManagementDetection Engineering#sast#code#rules

Static analysisFreemium

SQL-powered endpoint visibility.

Detection Engineering#endpoint#telemetry#sql

Endpoint telemetryOpen-source

VelociraptorFeatured

Endpoint visibility and DFIR collection.

Detection EngineeringThreat Intelligence#dfir#endpoint#hunting

DFIR platformOpen-source

SigmaFeatured

Generic SIEM detection rule format.

Detection Engineering#sigma#siem#detections

Detection rulesOpen-source

YARA

Pattern matching for malware research.

Malware AnalysisDetection Engineering#yara#malware#reverse-engineering

Malware rulesOpen-source

Open-source IDS, IPS, and network security monitoring.

Detection Engineering#ids#network#signatures

Network detectionOpen-source

Zeek

Network security monitoring framework.

Detection Engineering#network#telemetry#nsm

Network telemetryOpen-source

MITRE Caldera

Adversary emulation platform.

Detection Engineering#attack#emulation#testing

Adversary emulationOpen-source

Atomic Red Team

Small ATT&CK-aligned detection tests.

Detection Engineering#attack#testing#coverage

Detection testingOpen-source

MITRE ATT&CKFeatured

Adversary tactics and techniques knowledge base.

Threat IntelligenceDetection Engineering#attack#ttp#coverage

Knowledge baseFree