CrowdStrike / gofalcon
Golang-based SDK to CrowdStrike's APIs
☆60Updated last week
Related projects ⓘ
Alternatives and complementary repositories for gofalcon
- pocket guide for core detection engineering concepts☆27Updated last year
- Unleash the power of the Falcon Platform at the CLI☆113Updated 3 weeks ago
- ☆66Updated 6 months ago
- Developer enhancements (DX) for FalconPy, the CrowdStrike Python SDK☆36Updated last week
- enpoint detection / live analysis & sandbox host / signatures quality test☆42Updated 3 years ago
- ☆37Updated 2 months ago
- ☆34Updated last year
- ☆40Updated 5 months ago
- Automated testing, generation & manipulation of #osquery packs☆70Updated last month
- Recon Hunt Queries☆75Updated 3 years ago
- A tool that allows you to document and assess any security automation in your SOC☆41Updated 3 weeks ago
- Cisco Orbital - Osquery queries by Talos☆123Updated 2 months ago
- ForgeArmory provides TTPs that can be used with the TTPForge (https://github.com/facebookincubator/ttpforge).☆93Updated 2 months ago
- Summiting the Pyramid is a research project focused on engineering cyber analytics to make adversary evasion more difficult. The research…☆27Updated last month
- A community event for security researchers to share their favorite notebooks☆106Updated 9 months ago
- Security Alert Decoration☆26Updated this week
- A cheatsheet containing AWS CloudTrail events that can be used for Incident Response purposes or Detection Engineering.☆62Updated 6 months ago
- This repository contains the research and components of our research into using Sigma for AWS Incident Response.☆25Updated last year
- A POC to implement Detection-as-Code with Terraform and Sumo Logic.☆26Updated last year
- Falcon Integration Gateway (FIG)☆18Updated last month
- A Go implementation and parser for Sigma rules.☆84Updated 2 months ago
- OSSEM Data Dictionaries☆59Updated 3 months ago
- ALFA stands for Automated Audit Log Forensic Analysis for Google Workspace. You can use this tool to acquire all Google Workspace audit l …☆145Updated last week
- Roota is a public-domain language of threat detection and response that combines native queries from a SIEM, EDR, XDR, or Data Lake with …☆116Updated 4 months ago
- The Infosec Community Definitive Guide to Jupyter Notebooks☆115Updated 4 years ago
- Import specific data sources into the Sigma generic and open signature format.☆77Updated 2 years ago
- GCP CSPM using Google Sheets☆34Updated 5 months ago