CrowdStrike / gofalcon
Golang-based SDK to CrowdStrike's APIs
☆60Updated this week
Related projects ⓘ
Alternatives and complementary repositories for gofalcon
- Developer enhancements (DX) for FalconPy, the CrowdStrike Python SDK☆36Updated this week
- ☆37Updated 2 months ago
- ☆40Updated 5 months ago
- ALFA stands for Automated Audit Log Forensic Analysis for Google Workspace. You can use this tool to acquire all Google Workspace audit l…☆144Updated this week
- Unleash the power of the Falcon Platform at the CLI☆112Updated 2 weeks ago
- pocket guide for core detection engineering concepts☆27Updated last year
- Recon Hunt Queries☆75Updated 3 years ago
- Automated testing, generation & manipulation of #osquery packs☆69Updated 3 weeks ago
- A Go implementation and parser for Sigma rules.☆84Updated 2 months ago
- ForgeArmory provides TTPs that can be used with the TTPForge (https://github.com/facebookincubator/ttpforge).☆92Updated last month
- A cheatsheet containing AWS CloudTrail events that can be used for Incident Response purposes or Detection Engineering.☆61Updated 6 months ago
- Simple Docker-based quickstart for osquery, Fleet, and ELK stack☆60Updated last year
- A tool that allows you to document and assess any security automation in your SOC☆41Updated last week
- Cloud Analytics helps defenders detect attacks to their cloud infrastructure by developing behavioral analytics for cloud platforms as we…☆51Updated last year
- ☆66Updated 5 months ago
- Cisco Orbital - Osquery queries by Talos☆122Updated 2 months ago
- Adversary emulation for EDR/SIEM testing (macOS/Linux)☆38Updated 9 months ago
- enpoint detection / live analysis & sandbox host / signatures quality test☆42Updated 3 years ago
- ☆86Updated 2 years ago
- A community event for security researchers to share their favorite notebooks☆106Updated 8 months ago
- CyberChef - Detection Engineering, TI, DFIR, Malware Analysis Edition☆62Updated 2 years ago
- Useful access control entries (ACE) on system access control list (SACL) of securable objects to find potential adversarial activity☆88Updated 2 years ago
- GCP CSPM using Google Sheets☆34Updated 5 months ago
- Falcon Data Replicator☆30Updated 7 months ago
- This repository contains the research and components of our research into using Sigma for AWS Incident Response.☆24Updated last year
- Cloud threat detection visualization from excalidraw☆12Updated 2 years ago
- A POC to implement Detection-as-Code with Terraform and Sumo Logic.☆25Updated last year
- Dettectinator - The Python library to your DeTT&CT YAML files.☆104Updated last week