CrowdStrike / FDRLinks
Falcon Data Replicator
☆32Updated 4 months ago
Alternatives and similar repositories for FDR
Users that are interested in FDR are comparing it to the libraries listed below
Sorting:
- Unleash the power of the Falcon Platform at the CLI☆123Updated 2 weeks ago
- Dorothy is a tool to test security monitoring and detection for Okta environments☆186Updated last year
- ☆96Updated 2 years ago
- ALFA stands for Automated Audit Log Forensic Analysis for Google Workspace. You can use this tool to acquire all Google Workspace audit l…☆164Updated 5 months ago
- Attack Range to test detection against nativel serverless cloud services and environments☆35Updated 3 years ago
- Synthetic Adversarial Log Objects: A Framework for synthentic log generation☆83Updated last year
- A cross-platform baselining, threat hunting, and attack surface analysis tool for security teams.☆227Updated 4 months ago
- Cisco Orbital - Osquery queries by Talos☆134Updated last year
- Developer enhancements (DX) for FalconPy, the CrowdStrike Python SDK☆40Updated 3 weeks ago
- Collects a listing of MITRE ATT&CK Techniques, then discovers Splunk ESCU detections for each technique☆67Updated last year
- These are files that a new CISO or someone introducing security to an organization can leverage to bridge the gap between security and th…☆72Updated 10 months ago
- Phantom Apps Repo☆83Updated 3 years ago
- A POC to implement Detection-as-Code with Terraform and Sumo Logic.☆29Updated 2 years ago
- Splunk Content Control Tool☆116Updated this week
- pocket guide for core detection engineering concepts☆30Updated 2 years ago
- ☆86Updated 5 months ago
- ☆144Updated 2 weeks ago
- Recon Hunt Queries☆77Updated 4 years ago
- The FASTEST way to consume threat intel.☆68Updated 2 years ago
- A community event for security researchers to share their favorite notebooks☆108Updated last year
- The Infosec Community Definitive Guide to Jupyter Notebooks☆125Updated 4 years ago
- ☆42Updated 4 years ago
- A tool that allows you to document and assess any security automation in your SOC☆46Updated 9 months ago
- BulkStrike enables the usage of CrowdStrike Real Time Response (RTR) to bulk execute commands on multiple machines.☆42Updated 2 years ago
- ☆65Updated last year
- Security Monitoring Resolution Categories☆138Updated 3 years ago
- This repo represents work the Phantom Community collaborates on to build apps and learn.☆13Updated 4 years ago
- Threat Hunting & Incident Investigation with Osquery☆213Updated 3 years ago
- ☆55Updated 4 years ago
- Use Terraform to Provision Your Own Cloud-Based Remote Browsing Workstation☆26Updated last year