GitHub repo leaderboard by stars, growth rate and activity.
Open-source AI-powered Security Operations Center — alert fusion, purple-team drills, agent-assisted triage, MITRE ATT&CK investigation. MIT-licensed, self-hostable.
A curated knowledge base to build, run and mature a SOC (including CSIRT).
Watcher - Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS.
Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.
Open source platform for cyber security analysts with many features for threat intelligence and detection engineering.
Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).
| # | Repo | Language | Stars | 30-day trend | Last updated |
|---|---|---|---|---|---|
| 1 | Open-source AI-powered Security Operations Center — alert fusion, purple-team drills, agent-assisted triage, MITRE ATT&CK investigation. MIT-licensed, self-hostable. | Python | 2,371 | last pushed 4 days ago | |
| 2 | A curated knowledge base to build, run and mature a SOC (including CSIRT). | — | 1,862 | last pushed 2 weeks ago | |
| 3 | Watcher - Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS. | JavaScript | 1,379 | last pushed 4 days ago | |
| 4 | Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization. | — | 1,335 | last pushed 1 month ago | |
| 5 | Open source platform for cyber security analysts with many features for threat intelligence and detection engineering. | JavaScript | 941 | last pushed 5 months ago | |
| 6 | Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language). | Jupyter Notebook | 826 | last pushed 4 weeks ago |
All · 11,474