Alternatives and similar repositories for defenda-data-lake

Users that are interested in defenda-data-lake are comparing it to the libraries listed below

• haidermdost / Threat-Detection-Maturity-Framework
  ☆18Updated 4 years ago
• 3CORESec / Trapdoor
  Serverless honeytoken 🕵🏻‍♂️
  ☆80Updated 2 years ago
• cado-security / AWS_EKS_Cluster_Forensics
  AWS EKS Cluster Forensics
  ☆23Updated 4 years ago
• telekom-security / acquire-aws-ec2
  A python script to acquire multiple aws ec2 instances in a forensically sound-ish way
  ☆38Updated 3 years ago
• jshlbrd / detection-engineering-pocket-guide
  pocket guide for core detection engineering concepts
  ☆30Updated 2 years ago
• Algbra-Labs-OSS / Chronicle
  ☆65Updated last year
• Cisco-Talos / osquery_queries
  Cisco Orbital - Osquery queries by Talos
  ☆134Updated last year
• invictus-ir / Sigma-AWS
  This repository contains the research and components of our research into using Sigma for AWS Incident Response.
  ☆29Updated 2 years ago
• disruptops / IncidentResponseGenerator
  Updated incident response generator for training classes
  ☆44Updated 4 years ago
• ReconInfoSec / rhq
  Recon Hunt Queries
  ☆78Updated 4 years ago
• amrandazz / attack-guardduty-navigator
  A MITRE ATT&CK Navigator export for AWS GuardDuty Findings
  ☆138Updated 4 years ago
• MISP / misp-compliance
  Legal, procedural and policies document templates for operating MISP and information sharing communities
  ☆38Updated 2 years ago
• runreveal / sigmalite
  ☆47Updated 6 months ago
• ansorren / GDPatrol
  A Lambda-powered Security Orchestration framework for AWS GuardDuty
  ☆53Updated 5 years ago
• carta / krang
  Knowledge Report Alert & Normalization Generator
  ☆27Updated last year
• w8mej / ThreatPlays
  Sharing Threat Hunting runbooks
  ☆26Updated 6 years ago
• MISP / misp-cloud
  misp-cloud - Cloud-ready images of MISP
  ☆73Updated 3 years ago
• 0xThiebaut / sigmai
  Import specific data sources into the Sigma generic and open signature format.
  ☆78Updated 3 years ago
• OTRF / notebooks-forge
  A collection of notebooks built for defensive and offensive operations.
  ☆77Updated 4 years ago
• pulsedive / certrss
  ☆119Updated last year
• HASecuritySolutions / elastic_stack
  ☆34Updated 4 years ago
• ThreatResponse / threatresponse_web
  Web based analysis platform for use with the AWS_IR command line tool.
  ☆17Updated 9 years ago
• magoo / Vault-for-Incident-Responders
  Things to know when DFIR occurs near a vault deployment.
  ☆43Updated 7 years ago
• bromiley / pollen
  pollen - A command-line tool for interacting with TheHive
  ☆35Updated 6 years ago
• OktaSecurityLabs / CheatSheets
  ☆32Updated 7 years ago
• Permiso-io-tools / cloudtail
  ☆30Updated 2 months ago
• fireeye / CVE-2021-44228
  OpenIOC rules to facilitate hunting for indicators of compromise
  ☆37Updated 3 years ago
• splunk / attack_range_cloud
  Attack Range to test detection against nativel serverless cloud services and environments
  ☆35Updated 4 years ago
• ioc-fang / ioc-fanger
  Fang and defang indicators of compromise. You can test this project in a GUI here: http://ioc-fanger.hightower.space .
  ☆65Updated last year
• anelshaer / Remote-Linux-Triage-Collection-using-OSquery
  Remotely collect linux live forensics artifacts.
  ☆14Updated 3 years ago