Practical tools for system, network, security, and operations administrators.

SEC

Security desk

Hashes, encodings, headers, and checks you would rather run yourself. Nothing here asks for an account.

97–120 / 915

Wazuh Cloud Admin Login Without MFA Detection Generator

Live

Generate a tuned Wazuh detection for cloud admin login without mfa with field mapping and false-positive guidance

Open tool

Wazuh Mailbox Forwarding Rule Created Detection Generator

Live

Generate a tuned Wazuh detection for mailbox forwarding rule created with field mapping and false-positive guidance

Open tool

Wazuh Credential Dumping (LSASS Access) Detection Generator

Live

Generate a tuned Wazuh detection for credential dumping (lsass access) with field mapping and false-positive guidance

Open tool

Sigma Brute Force Login Detection Generator

Live

Generate a tuned Sigma detection for brute force login with field mapping and false-positive guidance

Open tool

Sigma Password Spray Detection Generator

Live

Generate a tuned Sigma detection for password spray with field mapping and false-positive guidance

Open tool

Sigma New Admin Account Created Detection Generator

Live

Generate a tuned Sigma detection for new admin account created with field mapping and false-positive guidance

Open tool

Sigma Privileged Group Membership Change Detection Generator

Live

Generate a tuned Sigma detection for privileged group membership change with field mapping and false-positive guidance

Open tool

Sigma Security Log Cleared Detection Generator

Live

Generate a tuned Sigma detection for security log cleared with field mapping and false-positive guidance

Open tool

Sigma Suspicious PowerShell Execution Detection Generator

Live

Generate a tuned Sigma detection for suspicious powershell execution with field mapping and false-positive guidance

Open tool

Sigma Ransomware File Activity Detection Generator

Live

Generate a tuned Sigma detection for ransomware file activity with field mapping and false-positive guidance

Open tool

Sigma Cloud Admin Login Without MFA Detection Generator

Live

Generate a tuned Sigma detection for cloud admin login without mfa with field mapping and false-positive guidance

Open tool

Sigma Mailbox Forwarding Rule Created Detection Generator

Live

Generate a tuned Sigma detection for mailbox forwarding rule created with field mapping and false-positive guidance

Open tool

Sigma Credential Dumping (LSASS Access) Detection Generator

Live

Generate a tuned Sigma detection for credential dumping (lsass access) with field mapping and false-positive guidance

Open tool

CrowdStrike Falcon LogScale Brute Force Login Detection Generator

Live

Generate a tuned CrowdStrike Falcon LogScale detection for brute force login with field mapping and false-positive guidance

Open tool

CrowdStrike Falcon LogScale Password Spray Detection Generator

Live

Generate a tuned CrowdStrike Falcon LogScale detection for password spray with field mapping and false-positive guidance

Open tool

CrowdStrike Falcon LogScale New Admin Account Created Detection Generator

Live

Generate a tuned CrowdStrike Falcon LogScale detection for new admin account created with field mapping and false-positive guidance

Open tool

CrowdStrike Falcon LogScale Privileged Group Membership Change Detection Generator

Live

Generate a tuned CrowdStrike Falcon LogScale detection for privileged group membership change with field mapping and false-positive guidance

Open tool

CrowdStrike Falcon LogScale Security Log Cleared Detection Generator

Live

Generate a tuned CrowdStrike Falcon LogScale detection for security log cleared with field mapping and false-positive guidance

Open tool

CrowdStrike Falcon LogScale Suspicious PowerShell Execution Detection Generator

Live

Generate a tuned CrowdStrike Falcon LogScale detection for suspicious powershell execution with field mapping and false-positive guidance

Open tool

CrowdStrike Falcon LogScale Ransomware File Activity Detection Generator

Live

Generate a tuned CrowdStrike Falcon LogScale detection for ransomware file activity with field mapping and false-positive guidance

Open tool

CrowdStrike Falcon LogScale Cloud Admin Login Without MFA Detection Generator

Live

Generate a tuned CrowdStrike Falcon LogScale detection for cloud admin login without mfa with field mapping and false-positive guidance

Open tool

CrowdStrike Falcon LogScale Mailbox Forwarding Rule Created Detection Generator

Live

Generate a tuned CrowdStrike Falcon LogScale detection for mailbox forwarding rule created with field mapping and false-positive guidance

Open tool

CrowdStrike Falcon LogScale Credential Dumping (LSASS Access) Detection Generator

Live

Generate a tuned CrowdStrike Falcon LogScale detection for credential dumping (lsass access) with field mapping and false-positive guidance

Open tool

ISO 27001 Readiness Assessment

Live

Readiness Assessment for ISO 27001, pre-filled with the framework's requirements and exportable

Open tool