GEANT / TRANSITS
Home for TRANSITS materials
☆15Updated last month
Related projects: ⓘ
- A tool that allows you to document and assess any security automation in your SOC☆40Updated 4 months ago
- MISP-STIX-Converter - Python library to handle the conversion between MISP and STIX formats☆47Updated this week
- ☆51Updated 3 years ago
- A collection of tips for using MISP.☆74Updated 5 months ago
- This repository hosts files relating to the TF-CSIRT Reference Security Incident Taxonomy Working Group.☆64Updated 9 months ago
- Incident response teams usually working on the offline data, collecting the evidence, then analyze the data☆44Updated 2 years ago
- Recon Hunt Queries☆76Updated 3 years ago
- ☆34Updated 3 years ago
- Pulls IOCs from MISP and adds the to reference sets in QRadar☆33Updated last year
- Incident Response Methodologies (IRM), also called Incident Playbook, based on the work done by the CERT Societe General☆23Updated 2 years ago
- Open source training materials for law-enforcement and organisations interested in DFIR.☆55Updated 2 years ago
- ☆40Updated last year
- Repository for SPEED SIEM Use Case Framework☆52Updated 4 years ago
- Digital Forensic Analysis and Incident Response Playbooks to handle real world security incidents☆37Updated 4 months ago
- ☆31Updated 10 months ago
- ☆43Updated 2 years ago
- This guide describes a process for developing Cyber Threat Intelligence Priority Intelligence Requirements☆113Updated 9 months ago
- RRR (Rapid Response Reporting) is a collection of Incident Response Report objects. They are designed to help incident responders provid…☆36Updated 2 years ago
- ☆41Updated 3 years ago
- ☆20Updated last year
- Cybersecurity Incident Response Plan☆86Updated 3 years ago
- Collects a listing of MITRE ATT&CK Techniques, then discovers Splunk ESCU detections for each technique☆64Updated 6 months ago
- Volatility plugins developed and maintained by the community☆21Updated 6 years ago
- A community event for security researchers to share their favorite notebooks☆105Updated 7 months ago
- The Project can be used to integrate QRadar with MISP Threat Sharing Platform☆37Updated 2 years ago
- A Splunk App containing Sigma detection rules, which can be updated from a Git repository.☆106Updated 4 years ago
- My Jupyter Notebooks☆36Updated 5 months ago
- This directory features proven systems that demonstrate value to your threat-informed efforts using metrics.☆93Updated 6 months ago
- The Intelligent Process Lifecycle of Active Cyber Defenders☆31Updated last year
- ☆83Updated 2 years ago