security-operations

Open-source AI-powered Security Operations Center — alert fusion, purple-team drills, agent-assisted triage, MITRE ATT&CK investigation. MIT-licensed, self-hostable.

Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from reconnaissance through execution and reporting. With built-in command automation, output parsing, and AI‑assisted summaries, it delivers faster, more structured, and high‑quality security assessments.

学习安全运营的记录 | The knowledge base of security operation

CompTIA Security+ SY0-701 study guide with exam objectives, quick review, security operations, IAM, GRC, risk, incident response, and exam prep notes.

Community Security Analytics provides a set of community-driven audit & threat queries for Google Cloud

Detecting ATT&CK techniques & tactics for Linux

MCP Server for Wazuh SIEM

Open-source framework to detect outliers in Elasticsearch events

安全运维工具箱是一款面向安全运维场景的集成化利器，融合了资产管理、资产测绘、漏洞检测、配置核查、弱口令检测、批量化运维、漏洞跟踪、报告生成以及日志审计等核心功能模块。

📚【更新中】AISecOps: AI-Driven Enterprise Security｜AI 驱动的安全体系。一套将 AI 能力嵌入企业安全体系的方法论框架，以及支撑它落地的完整工程实践——从安全架构、GRC、云原生、数据隐私到 SOC 运营、身份治理与 AI 系统安全。开源中文技术专著，CC BY-NC-SA 4.0。/*⚡🌊🛡️*/

Pointing cybersecurity teams to thousands of detection rules and offensive security tests aligned with common attacker techniques

My learning, tutorials on Cybersecurity

Curso para aprender Ciberseguridad desde cero, en español y 100% gratis. Abarca 5 dominios fundamentales que necesitas conocer para poder dar tus primeros pasos en este apasionante mundo.

Write detections, investigate alerts, and query logs from your favorite AI agents

基于Agent驱动的网络安全流量监控与分析平台，下一代AI驱动的安全运营协作平台 — 智能告警研判、资产关联、协同处置与自动化报告生成，为护网行动增添一把利器。

A Security Operations playbook to assist blue teamers from day-to-day tasks to Digital Forensics and Incident Response (DFIR) activities.

Elastic TIP is a python tool which automates the process of aggregating Threat Intelligence and ingesting the intelligence into a common format into Elasticsearch with the main goal of being used by the Security solution.