Alternatives and similar repositories for Identity-Protection

Users that are interested in Identity-Protection are comparing it to the libraries listed below

• bk-cs / rtr
  Real-time Response scripts and schema
  ☆118Updated last year
• CrowdStrike / logscale-community-content
  This repository contains Community and Field contributed content for LogScale
  ☆272Updated last week
• PwC-IR / Business-Email-Compromise-Guide
  The Business Email Compromise Guide sets out to describe 10 steps for performing a Business Email Compromise (BEC) investigation in an Of…
  ☆261Updated 4 years ago
• keyboardcrunch / sentinelone-queries
  Repository of SentinelOne Deep Visibility queries.
  ☆133Updated 4 years ago
• CrowdStrike / psfalcon
  PowerShell for CrowdStrike's OAuth2 APIs
  ☆435Updated this week
• shauntdergrigorian / splunkqueries
  A list of Splunk queries that I've collected and used over time.
  ☆86Updated 4 years ago
• LogRhythm-Tools / LogRhythm.Tools
  LogRhythm PowerShell Toolkit
  ☆51Updated last month
• CrowdStrike / falconpy
  The CrowdStrike Falcon SDK for Python
  ☆435Updated 3 weeks ago
• activecm / threat-tools
  Tools for simulating threats
  ☆193Updated last year
• SophosRapidResponse / OSQuery
  ☆87Updated 6 months ago
• pe3zx / crowdstrike-falcon-queries
  A collection of Splunk's Search Processing Language (SPL) for Threat Hunting with CrowdStrike Falcon
  ☆210Updated 5 years ago
• CrowdStrike / falcon-scripts
  Scripts to streamline the deployment and use of the CrowdStrike Falcon sensor
  ☆188Updated 2 months ago
• rapid7 / insightvm-sql-queries
  InsightVM helpful SQL queries
  ☆71Updated 7 months ago
• blackhillsinfosec / EventLogging
  Automation scripts to deploy Windows Event Forwarding, Sysmon, and custom audit policies in an Active Directory environment.
  ☆485Updated 10 months ago
• madirish / ossocdocs
  Open Source Security Operations Center Documentation
  ☆195Updated 3 months ago
• Mikoyan-Dee / CrowdStrike-Queries
  CrowdStrike Falcon Queries For Advanced Threat Detection
  ☆25Updated 7 months ago
• guardsight / gsvsoc_cirt-playbook-battle-cards
  Cyber Incident Response Team Playbook Battle Cards
  ☆416Updated last year
• cudeso / misp2sentinel
  MISP to Sentinel integration
  ☆74Updated last month
• InfoSecInnovations / What2Log
  ☆41Updated 2 years ago
• freeload101 / CrowdStrike_RTR_Powershell_Scripts
  ☆80Updated last year
• acquiredsecurity / Sentinel-One-STAR-Rules-Threat-Hunts
  SentinelOne STAR Rules
  ☆69Updated 7 months ago
• keyboardcrunch / SentinelOne-Query-Navigator
  Web based S1 query navigator for one-click threat hunting
  ☆23Updated 4 years ago
• ethack / tht
  Threat Hunting Toolkit is a Swiss Army knife for threat hunting, log processing, and security-focused data science
  ☆144Updated last month
• Bert-JanP / SecScripts
  Security Scripts and Sources for daily usage.
  ☆65Updated 3 months ago
• SigmaHQ / pySigma-backend-insightidr
  ☆15Updated last month
• guardsight / gsvsoc_cybersecurity-incident-response-plan
  Cybersecurity Incident Response Plan
  ☆105Updated 5 years ago
• splunk / botsv3
  Splunk Boss of the SOC version 3 dataset.
  ☆373Updated 5 years ago
• JSCU-NL / logging-essentials
  A Windows event logging and collection baseline focused on finding balance between forensic value and optimising retention.
  ☆289Updated 4 years ago
• dhoelzer / ShowMeThePackets
  Useful network monitoring, analysis, and active response tools used or mentioned in the SANS SEC503 course (https://www.sans.org/course/i…
  ☆240Updated 9 months ago
• secure-cake / rapid-endpoint-investigations
  Scripts for rapid Windows endpoint "tactical triage" and investigations with Velociraptor and KAPE
  ☆157Updated 2 weeks ago