detection-validation

Security Playbooks is a collection of defensive security resources, MITRE ATT&CK mapping, incident response, detection rules (Sigma, YARA, and Suricata), security validation, detection validation, and hands-on labs for cybersecurity professionals and SOC analysts.

Hands-on detection engineering portfolio focused on behavior-based threat detection, EQL, and real-world attack analysis

Redpen is a security testing harness that validates your defenses by simulating attacks with safe markers. It generates detailed reports, integrates with CI/CD, and maps to MITRE ATT&CK — so you know exactly what your security stack would catch in a real breach.

Risk-driven detection validation: runs real Atomic Red Team tests in an isolated Wazuh lab, proves whether your Sigma rules catch them with attributable evidence, and measures false positives — replay any run without the lab.

Benign, authorized-use-only adversary-emulation & detection-validation harness mapped to MITRE ATT&CK (purple-team; Caldera/Atomic Red Team category).

Safe local purple-team automation and ATT&CK detection validation framework