Skip to content
#

Detection engineering

Star

Detection engineering is the practice of designing, developing, testing, and maintaining security detections that identify malicious or unauthorized activity. It combines security telemetry, threat intelligence, adversary behavior, and detection analytics to help defenders identify and investigate threats.

Detection engineering commonly involves creating and validating detection rules, analyzing security logs and telemetry, mapping detections to adversary techniques, reducing false positives, and improving detection coverage. It is used across security operations, threat hunting, incident response, and security monitoring.

This topic covers tools, frameworks, detection-as-code practices, detection rules, testing methodologies, and other technologies used to build and maintain effective security detections.

Here are 1,670 public repositories matching this topic...

Language: All
Filter by language
All 1,670 Python 653 Shell 72 PowerShell 48 JavaScript 45 HTML 44 Go 34 TypeScript 32 Rust 29 HCL 20 YARA 19
Sort: Most stars
Sort options
Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated
Digital-Forensics-Guide

mikeroyal / Digital-Forensics-Guide

Star 3.1k

Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.

security osint alerting forensics dfir intrusion-detection siem digital-forensics offensive-security cyber-security network-security port-scanning forensic-analysis threat-intelligence mitre-attack forensics-investigations detection-engineering digitalforensics forensics-tools digitalforensicreadiness
  • Updated Jan 4, 2024
  • Python

beenuar / AiSOC

Star 2.4k

Open-source AI-powered Security Operations Center — alert fusion, purple-team drills, agent-assisted triage, MITRE ATT&CK investigation. MIT-licensed, self-hostable.

open-source neo4j clickhouse incident-response self-hosted cybersecurity siem soc threat-intelligence soar mitre-attack ai-security threat-detection purple-team security-operations detection-engineering alert-triage langgraph agentic-ai investigation-ledger
  • Updated Sep 7, 2026
  • Python
Open-Source-Security-Guide

mikeroyal / Open-Source-Security-Guide

Star 1.1k

Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP, FISMA, etc.), Frameworks, Threat Models, Encryption, and Benchmarks.

surveillance incident-response intrusion-detection infosec compliance siem vulnerabilities network-analysis information-security kali-linux vulnerability-detection offensive-security cyber-security incident-management pentesters privacy-protection mitre-attack scanning-tool detection-engineering forensics-tools
  • Updated Jun 27, 2025
  • Go
Followers
39 followers
Website
github.com/topics/detection-engineering

Related topics

cybersecurity threat-detection threat-hunting