CiscoSecurity / tg-01-basicsLinks
Scripts that cover the basics of interacting with the Threat Grid API
☆11Updated 5 years ago
Alternatives and similar repositories for tg-01-basics
Users that are interested in tg-01-basics are comparing it to the libraries listed below
Sorting:
- Threat Response API Module☆10Updated 2 years ago
- All the IOC's I have gathered which are used directly involved coronavirus / covid-19 / SARS-CoV-2 cyber attack campaigns☆65Updated 4 years ago
- All-in-one bundle of MISP, TheHive and Cortex☆169Updated 3 years ago
- Mark Baggett's (@MarkBaggett - GSE #15, SANS SEC573 Author) tool for detecting randomness using NLP techniques rather than pure entropy c…☆128Updated 3 years ago
- ☆123Updated 3 years ago
- A website and framework for testing NIDS detection☆57Updated 4 years ago
- Automated Use Case Testing☆170Updated 7 years ago
- Tools to automate and/or expedite response.☆115Updated last year
- ☆19Updated 3 years ago
- Primary data pipelines for intrusion detection, security analytics and threat hunting☆86Updated 3 years ago
- Ansible playbook to convert Sigma rules to ElastAlert rules☆10Updated 4 years ago
- A dockerized version of the sof-elk project☆13Updated 5 years ago
- Searches For Threat Hunting and Security Analytics☆238Updated 7 months ago
- Cuckoo Sandbox is an automated dynamic malware analysis system☆107Updated 5 years ago
- ☆50Updated 5 years ago
- This repository is created to add value to existing Network Security Monitoring solutions.☆43Updated 9 years ago
- A Splunk app with saved reports derived from Sigma rules☆73Updated 7 years ago
- A Splunk app to use MISP in background☆113Updated 3 weeks ago
- Python3 library and command line for GreyNoise☆153Updated 3 months ago
- Volatility plugins developed and maintained by the community☆21Updated last year
- SEC599 supporting GitHub repository☆16Updated 6 years ago
- FRAC and RIFT☆17Updated 6 years ago
- ☆222Updated 2 years ago
- Powershell - web traffic whitenoise generator☆47Updated 5 years ago
- Threat Hunting with ELK Workshop (InfoSecWorld 2017)☆65Updated 8 years ago
- To parse ugly Microsoft DNS Logs....☆41Updated 7 years ago
- This was code for analyzing round 1 of the MITRE Enterprise ATT&CK Evaluation. Please check out https://github.com/joshzelonis/Enterprise…☆95Updated 5 years ago
- Resolvn Threat Hunting Virtual Machine☆139Updated 6 years ago
- A lightweight tool to load Windows Event Log evtx files into Elasticsearch.☆119Updated 5 years ago
- The gse-study repo was assembled to serve as a consolidated, and comprehensive, study solution for the SANS GSE exam.☆25Updated 7 years ago