Topics / #detection-engineering

Detection-engineering projects on GitHub

As of , the most-starred Detection-engineering projects on GitHub are Anthropic-Cybersecurity-Skills (34.9K stars), sigma (11.3K stars) and AiSOC (3.5K stars). GitHub.Locker tracks 5 Detection-engineering repositories with 54.7K stars combined. The fastest-growing on October 23 was AiSOC, with +286 stars in a day.

5Projects
54.7KStars in total
+476Stars in a day
Browse in the catalog →github.com/topics/detection-engineering ↗

Hot right now

Most stars gained in a day · Oct 23

+286

AiSOC

beenuar/AiSOC · ★ 3.5K

Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.

+66

agent-beacon

Asymptote-Labs/agent-beacon · ★ 2.7K

An open-source memory layer for AI coding agents: it captures session history across Claude Code, Cursor, Codex, OpenCode and 20+ other harnesses, then turns useful workflows, corrections and debugging patterns into knowledge future agents can reuse.

+60

artex-global

jiwoochris/artex-global · ★ 2.1K

ARTEX-KO is a Korean localization of the ARTEX (Autumn-27/ARTEX) framework: a system where multiple LLM-driven agents autonomously run a penetration test end-to-end, from reconnaissance to exploitation, with a Go backend and an embedded Next.js frontend.

+54

Anthropic-Cybersecurity-Skills

mukul975/Anthropic-Cybersecurity-Skills · ★ 34.9K

An open-source library of 818 production-grade cybersecurity skills for AI agents, covering 34 security domains and mapped to six frameworks including MITRE ATT&CK and NIST CSF 2.0.

The all-time top

5 projects · by stars

  1. #1 · mukul975/Anthropic-Cybersecurity-Skills

    Anthropic-Cybersecurity-Skills

    An open-source library of 818 production-grade cybersecurity skills for AI agents, covering 34 security domains and mapped to six frameworks including MITRE ATT&CK and NIST CSF 2.0.

    34.9K
  2. #2 · SigmaHQ/sigma

    sigma

    Sigma is a generic, open signature format for describing detection patterns in log events, and this repository is the main collection of over 3000 community-written Sigma detection rules for SIEM systems.

    11.3K
  3. #3 · beenuar/AiSOC

    AiSOC

    Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.

    3.5K
  1. 4

    agent-beacon

    2.7KAsymptote-Labs/agent-beacon · Go

    An open-source memory layer for AI coding agents: it captures session history across Claude Code, Cursor, Codex, OpenCode and 20+ other harnesses, then turns useful workflows, corrections and debugging patterns into knowledge future agents can reuse.

  2. 5

    artex-global

    2.1Kjiwoochris/artex-global · Go

    ARTEX-KO is a Korean localization of the ARTEX (Autumn-27/ARTEX) framework: a system where multiple LLM-driven agents autonomously run a penetration test end-to-end, from reconnaissance to exploitation, with a Go backend and an embedded Next.js frontend.

Often tagged together