ElasticSA / wec_pepped
Pep up your Windows Event Collector (WEC) for Windows Event Forwarding (WEF)
☆19Updated 3 years ago
Related projects ⓘ
Alternatives and complementary repositories for wec_pepped
- Corelight-Ansible-Roles are a collection of Ansible Roles and playbooks that install, configure, run and manage a variety of Corelight, S…☆16Updated 3 years ago
- Wazuh - Splunk App☆50Updated 2 months ago
- OSCAL SSP content for technologies shipped by Red Hat☆15Updated last year
- Utility to automate generating and uploading STIX files to ExtraHop appliances via the REST API.☆8Updated 4 months ago
- Threat Intelligence with Elastic - Minemeld integration with Elasticsearch☆19Updated 3 years ago
- Ansible playbook automation for pfelk☆24Updated 2 years ago
- A solution for using the ElastiFlow Unified Collector with the Elastic Stack (Elasticsearch and Kibana).☆22Updated 3 months ago
- This repo contains information on how to auto deploy Sysmon via GPO and Task Scheduler☆12Updated 3 years ago
- An Ansible playbook for deploying the Suricata intrusion detection system and fetching Snort rules with Oinkmaster.☆15Updated 3 years ago
- Active Response plugin. Osquery to execute wazuh/ossec active response plugins. You can write your own plugins, easy to plug☆9Updated 4 years ago
- Mapping Corelight or Zeek data to Elastic Common Schema fields☆34Updated 2 weeks ago
- Setup a Primary Domain Controller and Active Directory on a Windows Server with a easy to use and abstracted Ansible role.☆21Updated 8 months ago
- Falcon Integration Gateway (FIG)☆18Updated last month
- Elastic TIP is a python tool which automates the process of aggregating Threat Intelligence and ingesting the intelligence into a common …☆27Updated 3 months ago
- Ansible Playbook to install the ELK Stack☆40Updated 4 years ago
- Converts Netwitness log parser configuration to Logstash configuration☆20Updated 4 years ago
- Fortinet configuration file convertor to JSON, XSLS files☆10Updated last year
- Tools to integrate 2 great security tools OPNsense and Wazuh☆27Updated 3 years ago
- CrowdStrike's Open Source Policy & Contribution Guide☆39Updated last year
- The NAVV (Network Architecture Verification and Validation) tool creates a spreadsheet for network traffic analysis from PCAP data and Ze…☆28Updated 5 months ago
- MineMeld nodes for MISP☆18Updated 10 months ago
- ansible role to setup MISP, Malware Information Sharing Platform & Threat Sharing☆52Updated last week
- The Project can be used to integrate QRadar with MISP Threat Sharing Platform☆39Updated 2 years ago
- Detection-as-Code CI/CD pipeline for modern security tools (SIEM, EDR, XDR, ...)☆16Updated this week
- ExtraHop public code examples☆33Updated 2 weeks ago
- A ComplianceAsCode blog☆25Updated last week
- Open source cyber-serenity platform that help the security teams designing and managing companies' ISMS, and which allow them to create r…☆15Updated this week
- Documentation used for Shuffle☆18Updated this week
- Kibana 7 Templates for Suricata IDPS Threat Hunting☆39Updated 2 years ago
- Ansible playbook for installing MineMeld on Linux☆48Updated 3 years ago