CrowdStrike / community
CrowdStrike's Open Source Policy & Contribution Guide
☆39Updated last year
Alternatives and similar repositories for community:
Users that are interested in community are comparing it to the libraries listed below
- ☆72Updated 3 months ago
- Tool to extract Sessions, MessageID(s) and find the emails belonging to MessageID(s). This script utilizes the MailItemsAccessed features…☆39Updated 4 years ago
- Import CrowdStrike Threat Intelligence into your instance of MISP☆42Updated 3 months ago
- Discover for Cloud and Containers Azure☆28Updated 2 months ago
- The Infosec Community Definitive Guide to Jupyter Notebooks☆121Updated 4 years ago
- Provides detection capabilities and log conversion to evtx or syslog capabilities☆52Updated 2 years ago
- Stand-Alone Windows Hardening (SAWH) is a script to reduce the attack surface of Windows systems that are not attached to a Windows Activ…☆50Updated 3 years ago
- The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL)☆260Updated 2 years ago
- Web based S1 query navigator for one-click threat hunting☆18Updated 4 years ago
- Microsoft Sentinel, Defender for Endpoint - KQL Detection Packs☆52Updated last year
- This code snippet retrieves Azure Sentinel rules that are mapped to MITRE ATT&CK Framework and generates the related MITRE D3FEND defense…☆70Updated 3 years ago
- ☆82Updated 3 weeks ago
- Repository of SentinelOne Deep Visibility queries.☆121Updated 3 years ago
- Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D. Azure and AWS terraform support.☆128Updated 2 years ago
- InsightVM helpful SQL queries☆63Updated last month
- The Business Email Compromise Guide sets out to describe 10 steps for performing a Business Email Compromise (BEC) investigation in an Of…☆249Updated 3 years ago
- Advanced Hunting Queries for Microsoft Security Products☆106Updated 2 years ago
- Developer enhancements (DX) for FalconPy, the CrowdStrike Python SDK☆39Updated last week
- Search a filesystem for indicators of compromise (IoC).☆69Updated 5 months ago
- Run Velociraptor on Security Onion☆37Updated 2 years ago
- Digital Forensic Analysis and Incident Response Playbooks to handle real world security incidents☆38Updated 9 months ago
- Endpoint detection for remote hosts for consumption by RITA and Elasticsearch☆68Updated last year
- MISP to Sentinel integration☆62Updated 2 months ago
- BulkStrike enables the usage of CrowdStrike Real Time Response (RTR) to bulk execute commands on multiple machines.☆41Updated 2 years ago
- MDE relies on some of the Audit settings to be enabled☆97Updated 2 years ago
- This repository contains Splunk queries to hunt some anomalies☆38Updated 2 years ago
- Unleash the power of the Falcon Platform at the CLI☆114Updated this week
- LogRhythm PowerShell Toolkit☆50Updated last week
- Repository for Cortex XDR and Cortex XSIAM XQL queries and more!☆23Updated 7 months ago
- Invoke-Forensics provides PowerShell commands to simplify working with the forensic tools KAPE and RegRipper.☆111Updated last year