Cisco-Talos / osquery_queriesLinks
Cisco Orbital - Osquery queries by Talos
☆136Updated last year
Alternatives and similar repositories for osquery_queries
Users that are interested in osquery_queries are comparing it to the libraries listed below
Sorting:
- Threat Hunting & Incident Investigation with Osquery☆215Updated 3 years ago
- Import specific data sources into the Sigma generic and open signature format.☆79Updated 3 years ago
- Automatically create YARA rules from malicious documents.☆212Updated 3 years ago
- Synthetic Adversarial Log Objects: A Framework for synthentic log generation☆85Updated last year
- Recon Hunt Queries☆79Updated 4 years ago
- A community event for security researchers to share their favorite notebooks☆109Updated last year
- Sigma Detection Rule Repository☆91Updated 5 years ago
- OSSEM Common Data Model☆56Updated 3 years ago
- ☆37Updated 5 years ago
- Collects a listing of MITRE ATT&CK Techniques, then discovers Splunk ESCU detections for each technique☆69Updated last year
- SIEGMA - Transform Sigma rules into SIEM consumables☆157Updated 9 months ago
- A Splunk App containing Sigma detection rules, which can be updated from a Git repository.☆111Updated 5 years ago
- A collection of tips for using MISP.☆75Updated last year
- Osquery Resources☆63Updated 6 years ago
- S2AN - Mapper of Sigma/Suricata Rules/Signatures ➡️ MITRE ATT&CK Navigator☆90Updated 3 years ago
- Detection Ideas & Rules repository.☆178Updated 4 years ago
- A cross-platform baselining, threat hunting, and attack surface analysis tool for security teams.☆245Updated 8 months ago
- Provides detection capabilities and log conversion to evtx or syslog capabilities☆55Updated 3 years ago
- Attack Range to test detection against nativel serverless cloud services and environments☆35Updated 4 years ago
- An ELK environment containing interesting security datasets.☆137Updated 5 years ago
- Python library for threat intelligence☆91Updated 11 months ago
- misp-cloud - Cloud-ready images of MISP☆74Updated 3 years ago
- Resources for SANS CTI Summit 2021 presentation☆104Updated 2 years ago
- Rip Raw is a small tool to analyse the memory of compromised Linux systems.☆133Updated 3 years ago
- ☆120Updated last month
- Repository for SPEED SIEM Use Case Framework☆56Updated 5 years ago
- Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…☆84Updated this week
- 🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.☆268Updated 2 years ago
- A CALDERA plugin☆79Updated 2 months ago
- Repository with Sample threat hunting notebooks on Security Event Log Data Sources☆70Updated 3 years ago