Rulehound
An index of publicly available and open-source threat detection rulesets.
- from
- Detection Engineering
- added
- 2026-10-10
- likes
- 0
similar
-
-
Regula regula.dev
-
-
Linux auditd Detection Ruleset github.com
Linux auditd ruleset that produces telemetry required for threat detection use cases.
-
-
Ridgeline Detection Library github.com
Production-validated detections across nine platforms (KQL, Sigma, Splunk, Athena, PowerShell, Velociraptor, YARA, Suricata, osquery), each with triggers, false positives, tuning guidance, and validation steps. Apache-2.0.
Detection Engineering › Detection Content & Signatures: “An index of publicly available and open-source threat detection rulesets.”