siem-rules

Here are 4 public repositories matching this topic...

sankyhack / Kubernetes-Detection-Engineering

This repo, focuses on detection engineering for Kubernetes Cluster. Sysdig Falco is used to create rules.

kubernetes cloud-native mitre detection-rules threat-detection runtime-security kubernetes-security detection-engineering falco-rules siem-rules

Updated Mar 1, 2026

move78ai / Genai-SIEM-Rules

Star

SIEM detection rules (Splunk, Sentinel, Elastic) to hunt Shadow AI, monitor proxy logs, and prevent LLM data exfiltration.

splunk sentinel threat-hunting siem elastic data-exfiltration ai-security llm-security shadow-ai siem-rules

Updated Feb 22, 2026

move78ai / EU-AI-ACT-SIEM-COMPLIANCE-DETECTIONS

Star

pen-source Splunk SIEM detection rules and SOAR playbooks mapped to the EU AI Act for monitoring AI security, data poisoning, and human oversight compliance.

splunk cybersecurity siem soc compliance-as-code ai-security threat-detection sigma-rules mitre-atlas cybersecurity-automation owasp-llm euaiact siem-rules genaisecurity

Updated Feb 22, 2026

clicksiem / sigma_rules

Star

Repository for auto update and convert sigma rules to clicksiem

clickhouse sigma-rules siem-rules clicksiem

Updated Sep 4, 2026
Python

Add this topic to your repo

To associate your repository with the siem-rules topic, visit your repo's landing page and select "manage topics."

Learn more