Pinned Loading

1. detection-factory detection-factory Public

   Detection-as-Code pipeline: Sigma rules validated in CI against real attack logs, converted to Microsoft Sentinel KQL, mapped to MITRE ATT&CK.

   Python

2. secure-vpn-infrastructure-aws secure-vpn-infrastructure-aws Public

   Ephemeral, hardened WireGuard VPN on AWS, defined entirely in Terraform

   Shell

3. endpoint-ops endpoint-ops Public

   PowerShell toolkit that turns SentinelOne, CyberArk EPM, VirusTotal, MalwareBazaar, Hybrid Analysis and ThreatFox API data into explainable review findings, with one guarded remediation workflow. B…

   PowerShell