OpenObserve is an open-source observability platform for logs, metrics, traces, and frontend monitoring. A cost-effective alternative to Datadog, Splunk, and Elasticsearch with 140x lower storage costs and single binary deployment.

Main Sigma Rule Repository

PyGraphistry is a Python library to quickly load, shape, embed, and explore big graphs with the GPU-accelerated Graphistry visual graph analyzer

100x Efficient Log Management than Splunk 🚀 Reduce your observability cost by 90%

Splunk Security Content

Test your code without writing mocks with ephemeral Docker containers 📦 Setup popular services with just a couple lines of code ⏱️ No bash, no yaml, only code 💻

A Splunk app mapped to MITRE ATT&CK to guide your threat hunts

Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.

Semantic Logger is a feature rich logging framework, and replacement for existing Ruby & Rails loggers.

Zentral is a high-visibility platform for controlling Apple endpoints in enterprises. It brings great observability to IT and makes tracking & reporting compliance much less manual.

Splunk Software Development Kit for Python

Awesome list of keywords and artifacts for Threat Hunting sessions

Timeline of Active Directory changes with replication metadata

Automation scripts to deploy Windows Event Forwarding, Sysmon, and custom audit policies in an Active Directory environment.

Replace Splunk in your small company with this one weird trick!

Helm charts associated with kubernetes plug-ins

Don't Just Search OSINT. Sweep It.

Splunk code (SPL) for serious threat hunters and detection engineers.

Cloud security monitoring tool and framework

A collection of Splunk's Search Processing Language (SPL) for Threat Hunting with CrowdStrike Falcon