Cybersecurity
Dfir Overview
Use to close the Offensive Vaccine loop on the defender side. The Detector agent produces Sigma / YARA rules from offensive operations; this catalog validates those rules against real memory dumps, event logs, and forensic artifacts using Volatility 3, plaso, and sigma-cli. Without this catalog, detection rules are theoretical.
- Publisher / source
- BitterSecurity/Decepticon (found on GitHub top repositories)
- Upstream record
- BitterSecurity/Decepticon
- Version
- Version 1
- Published
- Publication review
- Approved for publication
- Content fingerprint
3d47e6a9115e279b6bb8657e934554f2e0d14ddbd4a71e19191fc110c4bea498