CrowdStrike / falconpy

Related projects ⓘ

Alternatives and complementary repositories for falconpy

• CrowdStrike / psfalcon
  PowerShell for CrowdStrike's OAuth2 APIs
  ☆367Updated this week
• CrowdStrike / logscale-community-content
  This repository contains Community and Field contributed content for LogScale
  ☆156Updated this week
• pe3zx / crowdstrike-falcon-queries
  A collection of Splunk's Search Processing Language (SPL) for Threat Hunting with CrowdStrike Falcon
  ☆191Updated 4 years ago
• bk-cs / rtr
  Real-time Response scripts and schema
  ☆104Updated 11 months ago
• CrowdStrike / falcon-scripts
  Scripts to streamline the deployment and use of the CrowdStrike Falcon sensor
  ☆154Updated this week
• invictus-ir / Microsoft-Extractor-Suite
  A PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.
  ☆472Updated last week
• guardsight / gsvsoc_cirt-playbook-battle-cards
  Cyber Incident Response Team Playbook Battle Cards
  ☆360Updated 6 months ago
• FalconForceTeam / FalconFriday
  Hunting queries and detections
  ☆728Updated 2 months ago
• mdecrevoisier / SIGMA-detection-rules
  Set of SIGMA rules (>320) mapped to MITRE ATT&CK tactic and techniques
  ☆306Updated 5 months ago
• dlcowen / sansfor509
  Public script from SANS FOR509 Enterprise Cloud Incident Response
  ☆179Updated last month
• keyboardcrunch / sentinelone-queries
  Repository of SentinelOne Deep Visibility queries.
  ☆118Updated 3 years ago
• blackhillsinfosec / EventLogging
  Automation scripts to deploy Windows Event Forwarding, Sysmon, and custom audit policies in an Active Directory environment.
  ☆463Updated 7 months ago
• SigmaHQ / pySigma
  Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)
  ☆395Updated this week
• inodee / threathunting-spl
  Splunk code (SPL) for serious threat hunters and detection engineers.
  ☆266Updated 9 months ago
• DefensiveOrigins / AtomicPurpleTeam
  Atomic Purple Team Framework and Lifecycle
  ☆282Updated 3 years ago
• splunk / contentctl
  Splunk Content Control Tool
  ☆91Updated this week
• CrowdStrike / Falcon-Toolkit
  Unleash the power of the Falcon Platform at the CLI
  ☆112Updated last week
• center-for-threat-informed-defense / attack-flow
  Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by devel…
  ☆555Updated this week
• Cyb3r-Monk / Threat-Hunting-and-Detection
  Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).
  ☆636Updated last week
• atc-project / atc-react
  A knowledge base of actionable Incident Response techniques
  ☆612Updated 2 years ago
• mdecrevoisier / EVTX-to-MITRE-Attack
  Set of EVTX samples (>270) mapped to MITRE ATT&CK tactic and techniques to measure your SIEM coverage or developed new use cases.
  ☆524Updated 2 months ago
• CrowdStrike / zscaler-FalconX-integration
  This is the integration to feed Falcon X IOC data into zscaler's platform
  ☆14Updated 4 months ago
• chronicle / detection-rules
  Collection of YARA-L 2.0 sample rules for the Chronicle Detection API
  ☆316Updated 3 weeks ago
• splunk / attack_data
  A repository of curated datasets from various attacks
  ☆587Updated this week
• center-for-threat-informed-defense / attack-workbench-frontend
  An application allowing users to explore, create, annotate, and share extensions of the MITRE ATT&CK® knowledge base. This repository con…
  ☆320Updated last week
• alexverboon / MDATP
  MDATP
  ☆455Updated 3 months ago
• OTRF / Blacksmith
  Building environments to replicate small networks and deploy applications
  ☆317Updated 11 months ago
• mitre-attack / attack-datasources
  This content is analysis and research of the data sources currently listed in ATT&CK.
  ☆405Updated last year
• CrowdStrike / caracara
  Developer enhancements (DX) for FalconPy, the CrowdStrike Python SDK
  ☆36Updated this week