OTRF/Security-Datasets resource

Health v2 · maintenance only

Adoption not part of the score

1805 stars · 262 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

An open-source collection of malicious and benign security event datasets from different platforms, maintained by the Open Threat Research community. It supports threat detection research, adversary technique simulation, and validation of detection analytics with real labeled data.

Use cases

• find sample security event logs to test detection rules
• replay attack datasets to validate sigma detections
• get labeled data for security data science research
• simulate adversary techniques for threat hunting practice
• build MITRE ATT&CK mapped detection analytics
• practice security analysis with real-world data
• find datasets for a security CTF

When to choose

• you need realistic labeled security telemetry to develop or validate detection analytics
• you want to test threat hunting skills against known attack data
• you need datasets mapped to MITRE ATT&CK, Sigma, or Atomic Red Team
• you are building security data science features and need labeled and unlabeled data

When to avoid

• you need a live intrusion detection or SIEM product rather than static datasets
• you need production-scale streaming security telemetry
• you need guaranteed up-to-date datasets for the latest attack techniques

Facets

dataset · maturity active

security testing data-science security developer-tools data-science cross-platform python threat-hunting mitre-attack detection-analytics adversary-simulation infosec ctf sigma security-datasets

Member repositories

For agents

markdown · JSON · MCP: product_card(name="OTRF/Security-Datasets")