Hi, I'm Brendan Chamberlain 👋
I build detections, and the open-source resources that help other people build them. I've spent 15+ years in technical leadership roles across incident response, security operations, threat detection engineering, and security automation, with a soft spot for macOS security.
| Project | What it is |
|---|---|
| awesome-detection-engineering | A curated list of detection engineering resources: concepts, frameworks, tooling, and reading. |
| LOOBins · loobins.io | Living Off the Orchard: built-in macOS binaries and how threat actors abuse them. |
| Rulehound · rulehound.com | An index of publicly available, open-source threat detection rulesets. |
| DE AI Maturity · site | A community framework for assessing AI/LLM use across a detection engineering program. |
| auditd-ripper | Python CLI for normalizing, aggregating, and decoding auditd logs. |
| PySPL | Run Splunk SPL queries against Python dicts and lists. No Splunk required. |
Contributions are welcome on all of these. Open an issue or PR.
B.Sc. in Computer Networking and Information Security and M.Sc. in Cybersecurity Operations, both from Champlain College.
When I'm not at the keyboard, I'm riding bikes, skiing, traveling, or spending time with family and friends.