SIEM Rules

A rule repository for Security Operation Centres for SIEM deployments for enhanced detection capabilities. Includes Sigma, Azure Sentinel, ELK (Elastic Search), Splunk and custom analytic and hunting rules.

📁 Alerting Rule Repositories

📁 Windows OS

📁 Linux OS

📁 Firewall/Traffic Logs

📁 Azure

📁 AWS

📁 Office 365 & Email

📁 DNS