Alternatives and similar repositories for Falcon-Toolkit

Users that are interested in Falcon-Toolkit are comparing it to the libraries listed below

• CrowdStrike / caracara
  Developer enhancements (DX) for FalconPy, the CrowdStrike Python SDK
  ☆38Updated last week
• bk-cs / rtr
  Real-time Response scripts and schema
  ☆113Updated last year
• SophosRapidResponse / OSQuery
  ☆83Updated 2 months ago
• Silv3rHorn / BulkStrike
  BulkStrike enables the usage of CrowdStrike Real Time Response (RTR) to bulk execute commands on multiple machines.
  ☆42Updated 2 years ago
• PolarBearGod / CrowdStrike-RTR-Scripts
  ☆26Updated 3 years ago
• olafhartong / MDE-AuditCheck
  MDE relies on some of the Audit settings to be enabled
  ☆98Updated 2 years ago
• socprime / the-prime-hunt
  A browser extension for threat hunting that provides one UI for different SIEMs/EDRs and simplifies investigation
  ☆77Updated last year
• okta / customer-detections
  ☆120Updated last week
• invictus-ir / Blue-team-app-Office-365-and-Azure
  ☆72Updated 7 months ago
• thinkst / canary-utils
  Collection of useful Canary tools
  ☆79Updated last week
• splunk / salo
  Synthetic Adversarial Log Objects: A Framework for synthentic log generation
  ☆81Updated last year
• pfpt-andrew / Rapid-Response-Reporting
  RRR (Rapid Response Reporting) is a collection of Incident Response Report objects. They are designed to help incident responders provid…
  ☆37Updated 3 years ago
• freeload101 / CrowdStrike_RTR_Powershell_Scripts
  ☆74Updated last year
• pe3zx / crowdstrike-falcon-queries
  A collection of Splunk's Search Processing Language (SPL) for Threat Hunting with CrowdStrike Falcon
  ☆201Updated 5 years ago
• SentineLabs / S1QL-Queries
  ☆59Updated last year
• k-bailey / detection-engineering-maturity-matrix
  ☆95Updated 2 years ago
• msraju / Incident-Response-Playbooks
  ☆44Updated 2 years ago
• strozfriedberg / greppin-logs
  2021 SANS DFIR Summit: Greppin' Logs
  ☆20Updated 3 years ago
• dlcowen / sansfor509
  Public script from SANS FOR509 Enterprise Cloud Incident Response
  ☆201Updated 8 months ago
• redcanaryco / surveyor
  A cross-platform baselining, threat hunting, and attack surface analysis tool for security teams.
  ☆216Updated 2 months ago
• malwarejake-public / conference-presentations
  Conference presentations
  ☆47Updated last year
• acquiredsecurity / Sentinel-One-STAR-Rules-Threat-Hunts
  SentinelOne STAR Rules
  ☆61Updated 3 months ago
• keyboardcrunch / sentinelone-queries
  Repository of SentinelOne Deep Visibility queries.
  ☆127Updated 3 years ago
• Digital-Defense-Institute / triage.zip
  A preconfigured Velociraptor triage collector
  ☆52Updated last week
• AntiSyphon / BandBCampaigns
  Backdoors & Breaches: Campaigns. These are short guides to help Incident Captains by giving them game ideas based on actual breaches.
  ☆35Updated last year
• blueteamvillage / Project-Obsidian-DC30
  ☆41Updated last year
• WillOram / AzureAD-incident-response
  Notes on responding to security breaches relating to Azure AD
  ☆111Updated 3 years ago
• rapid7 / insightvm-sql-queries
  InsightVM helpful SQL queries
  ☆64Updated 3 months ago
• ReconInfoSec / velociraptor-to-timesketch
  ☆7Updated 7 months ago
• siriussecurity / dettectinator
  Dettectinator - The Python library to your DeTT&CT YAML files.
  ☆113Updated last month