Cisco-Talos / osquery_queries
Cisco Orbital - Osquery queries by Talos
☆122Updated 3 weeks ago
Related projects: ⓘ
- Recon Hunt Queries☆76Updated 3 years ago
- Threat Hunting & Incident Investigation with Osquery☆197Updated 2 years ago
- Import specific data sources into the Sigma generic and open signature format.☆77Updated 2 years ago
- SIEGMA - Transform Sigma rules into SIEM consumables☆139Updated last year
- OSSEM Common Data Model☆54Updated 2 years ago
- Automatically create YARA rules from malicious documents.☆207Updated 2 years ago
- A Linux Auditd rule set mapped to MITRE's Attack Framework☆87Updated 11 months ago
- Osquery Resources☆59Updated 5 years ago
- A community event for security researchers to share their favorite notebooks☆105Updated 7 months ago
- Sigma Detection Rule Repository☆84Updated 4 years ago
- ☆83Updated 2 years ago
- A CALDERA plugin☆72Updated 3 months ago
- A curated list of awesome things related to TheHive & Cortex☆170Updated 2 years ago
- ☆34Updated 3 years ago
- Python library for threat intelligence☆78Updated 2 months ago
- A cross-platform baselining, threat hunting, and attack surface analysis tool for security teams.☆170Updated last month
- Synthetic Adversarial Log Objects: A Framework for synthentic log generation☆76Updated 8 months ago
- A tool that allows you to document and assess any security automation in your SOC☆40Updated 4 months ago
- SIGMA UI is a free open-source application based on the Elastic stack and Sigma Converter (sigmac)☆184Updated 3 years ago
- 📇 Digital Forensics Artifact Repository (forensicanalysis edition)☆71Updated 7 months ago
- ☆101Updated this week
- Threat Detection & Anomaly Detection rules for popular open-source components☆49Updated 2 years ago
- ATT&CK Powered Suit is a browser extension that puts the complete MITRE ATT&CK® knowledge base at your fingertips with text search, conte…☆69Updated last week
- Resources for SANS CTI Summit 2021 presentation☆102Updated 10 months ago
- 🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.☆255Updated last year
- Anything Sysmon related from the MSTIC R&D team☆143Updated 3 months ago
- A Splunk App containing Sigma detection rules, which can be updated from a Git repository.☆106Updated 4 years ago
- Converts Sigma detection rules to a Splunk alert configuration.☆105Updated 4 years ago
- ☆43Updated 2 years ago
- Dettectinator - The Python library to your DeTT&CT YAML files.☆102Updated 3 weeks ago