Alternatives and similar repositories for FDR:

Users that are interested in FDR are comparing it to the libraries listed below

• CrowdStrike / caracara
  Developer enhancements (DX) for FalconPy, the CrowdStrike Python SDK
  ☆39Updated 3 weeks ago
• thinkst / canary-utils
  Collection of useful Canary tools
  ☆75Updated last month
• CrowdStrike / Falcon-Toolkit
  Unleash the power of the Falcon Platform at the CLI
  ☆113Updated last week
• k-bailey / detection-engineering-maturity-matrix
  ☆91Updated 2 years ago
• redcanaryco / redcanary-response-utils
  Tools to automate and/or expedite response.
  ☆113Updated 6 months ago
• invictus-ir / ALFA
  ALFA stands for Automated Audit Log Forensic Analysis for Google Workspace. You can use this tool to acquire all Google Workspace audit l…
  ☆153Updated last month
• Silv3rHorn / BulkStrike
  BulkStrike enables the usage of CrowdStrike Real Time Response (RTR) to bulk execute commands on multiple machines.
  ☆41Updated 2 years ago
• OktaSecurityLabs / CheatSheets
  ☆33Updated 6 years ago
• ReconInfoSec / rhq
  Recon Hunt Queries
  ☆76Updated 3 years ago
• sans-blue-team / sec530-wiki
  ☆54Updated 3 years ago
• infosecB / detection-as-code
  An example of how to deploy a Detection as Code pipeline using Sigma Rules, Sigmac, Gitlab CI, and Splunk.
  ☆51Updated 2 years ago
• splunk / attack_range_cloud
  Attack Range to test detection against nativel serverless cloud services and environments
  ☆35Updated 3 years ago
• MISP / misp-cloud
  misp-cloud - Cloud-ready images of MISP
  ☆72Updated 2 years ago
• redcanaryco / surveyor
  A cross-platform baselining, threat hunting, and attack surface analysis tool for security teams.
  ☆192Updated this week
• TheHive-Project / Synapse
  Synapse: a Meta Alert Feeder for TheHive, a Security Incident Response Platform
  ☆71Updated last year
• teamdfir / sift-saltstack
  Salt States for Configuring the SIFT Workstation
  ☆97Updated this week
• OTRF / infosec-jupyterthon
  A community event for security researchers to share their favorite notebooks
  ☆107Updated 11 months ago
• CrowdStrike / community
  CrowdStrike's Open Source Policy & Contribution Guide
  ☆39Updated last year
• panther-labs / tutorials
  Cloud security tutorials and best practices
  ☆38Updated last year
• mikermcneil / fleet-osquery-in-a-box
  Simple Docker-based quickstart for osquery, Fleet, and ELK stack
  ☆62Updated last year
• CrowdStrike / Cloud-Azure
  Discover for Cloud and Containers Azure
  ☆28Updated last month
• gertjanbruggink / metrics
  This directory features proven systems that demonstrate value to your threat-informed efforts using metrics.
  ☆104Updated last month
• invictus-ir / o365_dataset
  A dataset containing Office 365 Unified Audit Logs for security research and detection
  ☆48Updated 2 years ago
• HASecuritySolutions / LogCampaign
  Provides detection capabilities and log conversion to evtx or syslog capabilities
  ☆52Updated 2 years ago
• pfpt-andrew / Rapid-Response-Reporting
  RRR (Rapid Response Reporting) is a collection of Incident Response Report objects. They are designed to help incident responders provid…
  ☆36Updated 2 years ago
• d3sre / Use_Case_Applicability
  Security Monitoring Resolution Categories
  ☆138Updated 3 years ago
• mbegan / Okta-Identity-Cloud-for-Splunk
  Public REPO for splunkbase app
  ☆19Updated 3 years ago
• PwC-IR / MIA-MailItemsAccessed-
  Tool to extract Sessions, MessageID(s) and find the emails belonging to MessageID(s). This script utilizes the MailItemsAccessed features…
  ☆38Updated 4 years ago
• phantomcyber / phantom-community-projects
  This repo represents work the Phantom Community collaborates on to build apps and learn.
  ☆12Updated 3 years ago