Pinned Loading

1. detectest detectest Public

   Python

2. sigma-to-eql-converter sigma-to-eql-converter Public

   A tool to automatically translate community Sigma rules (YAML) to Elastic Event Query Language (EQL) queries.

   Python

3. wmi-persistence-threat-detection wmi-persistence-threat-detection Public

   Simulates a WMI Persistence Threat on Windows and detects it with behavioral EQL rules on Elastic SIEM. Covers MITRE ATT&CK, LOLBins, and system security labs.

   HTML