Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
egrexsec
/
cybersecurity-playbook
Public
Notifications
You must be signed in to change notification settings
Fork
0
Star
0
Code
Issues
4
Pull requests
2
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Actions
Projects
Security and quality
Insights
Actions: egrexsec/cybersecurity-playbook
Actions
All workflows
Workflows
detection-validation
detection-validation
Show more workflows...
Management
Caches
All workflows
All workflows
Actions
Loading...
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading.
Please reload this page
.
will be ignored since log searching is not yet available
Showing runs from all workflows
will be ignored since log searching is not yet available
55 workflow runs
55 workflow runs
Workflow
Filter by Workflow
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching workflows.
Event
Filter by Event
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching events.
Status
Filter by Status
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching statuses.
Branch
Filter by Branch
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching branches.
Actor
Filter by Actor
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching users.
feat: implement threat-informed detection cycle 1
detection-validation
#55:
Pull request
#23
opened by
egrexsec
3m 1s
feat/detection-cycle-1
feat/detection-cycle-1
3m 1s
View #23
View workflow file
feat: implement threat-informed detection cycle 1
detection-validation
#54:
Commit
0300291
pushed by
egrexsec
37s
feat/detection-cycle-1
feat/detection-cycle-1
37s
View #23
View workflow file
feat: validate T1546.003 WMI event subscriptions
detection-validation
#53:
Pull request
#22
opened by
egrexsec
29s
feat/pt-2026-013-wmi-event-subscription
feat/pt-2026-013-wmi-event-subscription
29s
View #22
View workflow file
feat: validate T1546.003 WMI event subscriptions
detection-validation
#52:
Commit
1edb002
pushed by
egrexsec
39s
feat/pt-2026-013-wmi-event-subscription
feat/pt-2026-013-wmi-event-subscription
39s
View #22
View workflow file
Merge pull request #19 from egrexsec/feat/validated-powershell-lifecy…
detection-validation
#51:
Commit
e64a35f
pushed by
egrexsec
37s
main
main
37s
View workflow file
Merge pull request #21 from egrexsec/feat/pt-2026-012-service-execution
detection-validation
#50:
Commit
ab27b2f
pushed by
egrexsec
42s
main
main
42s
View workflow file
feat: validate T1569.002 service execution
detection-validation
#49:
Pull request
#21
opened by
egrexsec
42s
feat/pt-2026-012-service-execution
feat/pt-2026-012-service-execution
42s
View #21
View workflow file
feat: validate T1569.002 service execution
detection-validation
#48:
Commit
788c9e6
pushed by
egrexsec
32s
feat/pt-2026-012-service-execution
feat/pt-2026-012-service-execution
32s
View #21
View workflow file
Publish Validated PowerShell Detection Lifecycle v1
detection-validation
#47:
Pull request
#19
opened by
egrexsec
41s
feat/validated-powershell-lifecycle-v1
feat/validated-powershell-lifecycle-v1
41s
View #19
View workflow file
feat: publish validated PowerShell lifecycle pack
detection-validation
#46:
Commit
09b19d8
pushed by
egrexsec
42s
feat/validated-powershell-lifecycle-v1
feat/validated-powershell-lifecycle-v1
42s
View #19
View workflow file
Merge pull request #18 from egrexsec/feat/detection-content-spec-v1
detection-validation
#45:
Commit
fcf52b6
pushed by
egrexsec
34s
main
main
34s
View workflow file
feat: add shared detection content specification v1
detection-validation
#44:
Pull request
#18
opened by
egrexsec
32s
feat/detection-content-spec-v1
feat/detection-content-spec-v1
32s
View #18
View workflow file
feat: add shared detection content contract
detection-validation
#43:
Commit
3db0426
pushed by
egrexsec
28s
feat/detection-content-spec-v1
feat/detection-content-spec-v1
28s
View #18
View workflow file
feat: harden automated IR and validation safety boundaries
detection-validation
#42:
Pull request
#16
synchronize by
egrexsec
28s
feat/automated-ir-powershell-foundation
feat/automated-ir-powershell-foundation
28s
View #16
View workflow file
feat: harden public IR validation workflow
detection-validation
#41:
Commit
0e8c4a4
pushed by
egrexsec
24s
feat/automated-ir-powershell-foundation
feat/automated-ir-powershell-foundation
24s
View #16
View workflow file
feat: document OpenCTI Shodan lab deployment
detection-validation
#40:
Pull request
#17
synchronize by
egrexsec
31s
feat/opencti-shodan-lab
feat/opencti-shodan-lab
31s
View #17
View workflow file
docs: sanitize OpenCTI validation details
detection-validation
#39:
Commit
69cf350
pushed by
egrexsec
32s
feat/opencti-shodan-lab
feat/opencti-shodan-lab
32s
View #17
View workflow file
feat: document OpenCTI Shodan lab deployment
detection-validation
#38:
Commit
04f53c3
pushed by
egrexsec
35s
feat/opencti-shodan-lab
feat/opencti-shodan-lab
35s
View workflow file
feat: document OpenCTI Shodan lab deployment
detection-validation
#37:
Pull request
#17
opened by
egrexsec
31s
feat/opencti-shodan-lab
feat/opencti-shodan-lab
31s
View #17
View workflow file
feat: harden automated IR and validation safety boundaries
detection-validation
#36:
Pull request
#16
synchronize by
egrexsec
46s
feat/automated-ir-powershell-foundation
feat/automated-ir-powershell-foundation
46s
View #16
View workflow file
feat: validate live Splunk to IR intake
detection-validation
#35:
Commit
896d87a
pushed by
egrexsec
53s
feat/automated-ir-powershell-foundation
feat/automated-ir-powershell-foundation
53s
View workflow file
feat: harden automated IR and validation safety boundaries
detection-validation
#34:
Pull request
#16
opened by
egrexsec
33s
feat/automated-ir-powershell-foundation
feat/automated-ir-powershell-foundation
33s
View #16
View workflow file
feat: add automated ir powershell workflow foundation
detection-validation
#33:
Commit
424b44b
pushed by
egrexsec
36s
feat/automated-ir-powershell-foundation
feat/automated-ir-powershell-foundation
36s
View workflow file
docs: refresh current-state metrics and status
detection-validation
#32:
Commit
f9a36bc
pushed by
egrexsec
30s
main
main
30s
View workflow file
Merge pull request #14 from egrexsec/feat/pt-2026-010-rundll32
detection-validation
#31:
Commit
93a6d88
pushed by
egrexsec
27s
main
main
27s
View workflow file
Previous
1
2
3
Next
You can’t perform that action at this time.