Projects

Projects I work on and maintain.

Awesome Detection Engineer 🔗

Online resources for Detection Engineers. Detection rules, detection logic, attack samples, detection tests and emulation tools, logging configuration and best practices, event log references, resources, labs, data manipulation online tools, blogs, newsletters, good reads, books, trainings, podcasts, videos and twitter/x accounts. The repo generates a bookmark file for easy import to your browser.

Resources are tailored as much as possible to the role of the detection engineer and not the field of cyber security in general.

Contributions are welcome!

Awesome SOC Analyst 🔗

Online resources for SOC Analysts. Resources related to incident investigation, blogs, newsletters, good reads, books, trainings, podcasts, Twitter/X accounts and a set of online tools for day-to-day investigations. The repo generates a bookmark file for easy import to your browser.

I will mostly include resources that are tailored as much as possible to the role of the SOC Analyst and not the field of cyber security in general.

Contributions are welcome!

KQL Queries 🔗

Kusto queries for Microsoft Sentinel and Microsoft Defender.

Lists of Things 🔗

Lists of things that can be used in detection engineering and threat hunting, like TOR IPs or Azure Ranges.