Cybersecurity and Infrastructure Security Agency

Pinned Loading

1. SIGMA_Rules SIGMA_Rules Public

   A collection of Sigma detection rules for SIEM platforms to identify malicious or suspicious activity and potential threats. Modify the rules as needed to align with your organization’s environment…

   19 1

2. vulnrichment vulnrichment Public

   A repo to conduct vulnerability enrichment.

   874 120

3. Malcolm Malcolm Public

   Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

   Python 2.5k 458

4. ScubaGear ScubaGear Public template

   Automation to assess the state of your M365 tenant against CISA's baselines

   PowerShell 2.7k 393

5. cisagov cisagov Public

   Profile information for the organization.

   Shell 3 2

6. development-guide development-guide Public

   A set of guidelines and best practices for an awesome engineering team

   Python 284 71