Purpleteam VS ThreatHunting-Keywords

What are some alternatives?

MAL-CL - MAL-CL (Malicious Command-Line)

sysmon-config - Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events.

UltimateAppLockerByPassList - The goal of this repository is to document the most common techniques to bypass AppLocker.

reversinglabs-siem-rules - A collection of various SIEM rules relating to malware family groups.

awesome-lists - Security lists for SOC detections

chainsaw - Rapidly Search and Hunt through Windows Forensic Artefacts

MurMurHash - This little tool is to calculate a MurmurHash value of a favicon to hunt phishing websites on the Shodan platform.

macOS-ATTACK-DATASET - JSON DataSet for macOS mapped to MITRE ATT&CK Tactics.

awesome-threat-detection - ✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️