CybercentreCanada / assemblyline4_docs
AssemblyLine4 documentation
☆29Updated 2 weeks ago
Alternatives and similar repositories for assemblyline4_docs:
Users that are interested in assemblyline4_docs are comparing it to the libraries listed below
- Base components for Assemblyline 4 (Datastore, ODM, Filestore, Remote Datatypes, utils function, etc...)☆69Updated last week
- Open Source Platform for storing, organizing, and searching documents related to cyber threats☆164Updated last year
- Rules generated from our investigations.☆194Updated last month
- AssemblyLine 4: File triage and malware analysis☆310Updated last week
- Technical add-on for Splunk related to TheHive/Cortex from TheHive project☆53Updated this week
- A repository of my own Sigma detection rules.☆158Updated 7 months ago
- Malware repository component for samples & static configuration with REST API interface.☆347Updated last month
- The Sigma command line interface based on pySigma☆151Updated last week
- Collection of Jupyter Notebooks by @fr0gger_☆162Updated last month
- Resources To Learn And Understand SIGMA Rules☆174Updated 2 years ago
- ATT&CK Powered Suit is a browser extension that puts the complete MITRE ATT&CK® knowledge base at your fingertips with text search, conte…☆77Updated 5 months ago
- SIEGMA - Transform Sigma rules into SIEM consumables☆149Updated last month
- A python script developed to process Windows memory images based on triage type.☆262Updated last year
- Pointing cybersecurity teams to thousands of detection rules and offensive security tests aligned with common attacker techniques☆132Updated last year
- Dettectinator - The Python library to your DeTT&CT YAML files.☆111Updated 2 weeks ago
- ☆27Updated 4 years ago
- Detection Ideas & Rules repository.☆179Updated 3 years ago
- A (nearly) production ready Dockered MISP☆231Updated last year
- This guide describes a process for developing Cyber Threat Intelligence Priority Intelligence Requirements☆118Updated last year
- A community event for security researchers to share their favorite notebooks☆107Updated last year
- An IDE and translation engine for detection engineers and threat hunters. Be faster, write smarter, keep 100% privacy.☆150Updated 2 months ago
- STIX2 graph visualisation library in JS☆90Updated 2 months ago
- YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA☆104Updated 3 weeks ago
- MISP-STIX-Converter - Python library to handle the conversion between MISP and STIX formats☆53Updated this week
- The Threat Actor Profile Guide for CTI Analysts☆106Updated last year
- pySigma Elasticsearch backend☆53Updated this week
- Automated YARA Rule Standardization and Quality Assurance Tool☆210Updated this week
- Public script from SANS FOR509 Enterprise Cloud Incident Response☆198Updated 7 months ago
- Repository of public reference frameworks for the DFIR community.☆116Updated last year
- BlackBerry Threat Research & Intelligence☆98Updated last year