D

detection-defense-library

Project information

Consolidated defense-engineering library: browse attack classes (UAC bypass, BYOVD driver load, LSASS/token theft, service abuse, registry persistence) to their detection patterns, committed Sigma rules, Windows trust boundaries, and the full driver attack-surface. Folds patterns/, sigma/ (3,141 rules), boundaries/, and drivers/ into one public reference.

defense detection-en... sigma siem Windows mitre-attack byovd security reference

24 Commits
1 Branch
0 Tags

README
MIT License
CONTRIBUTING

Created on

August 20, 2026

Loading