CrowdStrike / community
CrowdStrike's Open Source Policy & Contribution Guide
☆39Updated last month
Alternatives and similar repositories for community
Users that are interested in community are comparing it to the libraries listed below
Sorting:
- Tool to extract Sessions, MessageID(s) and find the emails belonging to MessageID(s). This script utilizes the MailItemsAccessed features…☆41Updated 4 years ago
- Microsoft Sentinel, Defender for Endpoint - KQL Detection Packs☆53Updated last year
- ☆72Updated 6 months ago
- Endpoint detection for remote hosts for consumption by RITA and Elasticsearch☆70Updated last year
- The Infosec Community Definitive Guide to Jupyter Notebooks☆121Updated 4 years ago
- ☆83Updated 2 months ago
- Web based S1 query navigator for one-click threat hunting☆19Updated 4 years ago
- Advanced Hunting Queries for Microsoft Security Products☆106Updated 2 years ago
- Discover for Cloud and Containers Azure☆29Updated 3 months ago
- Search a filesystem for indicators of compromise (IoC).☆71Updated 3 months ago
- Convert Sigma rules to LogRhythm searches☆21Updated 3 years ago
- InsightVM helpful SQL queries☆64Updated 3 months ago
- Repository of SentinelOne Deep Visibility queries.☆127Updated 3 years ago
- A tool that allows you to document and assess any security automation in your SOC☆46Updated 6 months ago
- Repository for Cortex XDR and Cortex XSIAM XQL queries and more!☆27Updated 11 months ago
- Cybersecurity Incident Response Plan☆91Updated 4 years ago
- Collection of PowerShell functinos and scripts a Blue Teamer might use☆84Updated last year
- Import CrowdStrike Threat Intelligence into your instance of MISP☆46Updated 2 months ago
- ☆58Updated last year
- This code snippet retrieves Azure Sentinel rules that are mapped to MITRE ATT&CK Framework and generates the related MITRE D3FEND defense…☆71Updated 3 years ago
- MDE relies on some of the Audit settings to be enabled☆97Updated 2 years ago
- Stand-Alone Windows Hardening (SAWH) is a script to reduce the attack surface of Windows systems that are not attached to a Windows Activ…☆52Updated 3 years ago
- BulkStrike enables the usage of CrowdStrike Real Time Response (RTR) to bulk execute commands on multiple machines.☆42Updated 2 years ago
- Security Scripts and Sources for daily usage.☆59Updated last month
- Digital Forensic Analysis and Incident Response Playbooks to handle real world security incidents☆41Updated last year
- The idea is simply to save some quick notes that will make it easier for Splunk users to leverage KQL (Kusto), especially giving projects…☆42Updated 4 years ago
- Provides detection capabilities and log conversion to evtx or syslog capabilities☆53Updated 2 years ago
- ☆70Updated last year
- An example of how to deploy a Detection as Code pipeline using Sigma Rules, Sigmac, Gitlab CI, and Splunk.☆56Updated 3 years ago
- A collection of various SIEM rules relating to malware family groups.☆66Updated 10 months ago