4.12.6 Detection & threat hunting

6 entries match these filters

• 0434 Wazuh: an open source security platform with agents, SIEM and XDR Wazuh installs a small agent on each server and sends its logs, file changes and package lists to a central manager that… Linux, macOS, Windows Repo Detection & threat hunting · Logs 15 Oct 2026
• 0435 CrowdSec: collaborative intrusion prevention that shares blocklists CrowdSec reads your logs, detects attacks such as brute force and scanning, blocks the source, and shares anonymised reports so that every… Linux, Windows Repo Detection & threat hunting · Firewalls 15 Oct 2026
• 0439 osquery: query your endpoints like a SQL database osquery exposes the state of a Linux, macOS or Windows machine as SQL tables, so you can ask which processes are listening,… Linux, macOS, Windows Repo Detection & threat hunting · Prometheus & Grafana 15 Oct 2026
• 0440 pySigma: the Python library that converts Sigma rules into queries pySigma parses Sigma detection rules and, with backend plugins, converts them into native queries for Splunk, Elastic, Loki, Sentinel and other log… Any system Repo Detection & threat hunting · Logs 15 Oct 2026
• 0441 Atomic Red Team: small tests that check whether your detections fire Atomic Red Team is a library of tiny, documented tests, each reproducing one attacker technique from MITRE ATT&CK, that defenders run in… Linux, macOS, Windows Repo Detection & threat hunting · Server hardening 15 Oct 2026
• 0426 Sigma: the open detection-rule format for log data The SigmaHQ repository holds the vendor-neutral Sigma rule specification and a community library of thousands of detection rules that converters translate into… Any system Repo Detection & threat hunting · Security resources & detection 15 Oct 2026