GenRockeR / mpsiemlibLinks
MP SIEM SDK
☆30Updated 3 weeks ago
Alternatives and similar repositories for mpsiemlib
Users that are interested in mpsiemlib are comparing it to the libraries listed below
Sorting:
- реп полезностей для PT MaxPatrol SIEM☆24Updated 2 years ago
- Enterprise Response Model & Common Knowledge☆39Updated 6 months ago
- Chrome extension for SOC automations☆37Updated 3 months ago
- ☆70Updated 4 years ago
- A free data collection and YARA scanning tool for cybersecurity incident investigation, compromise assessment and threat hunting☆18Updated last year
- BlackBerry Threat Research & Intelligence☆100Updated 2 years ago
- ☆78Updated 3 months ago
- Provides an advanced input.conf file for Windows and 3rd party related software with more than 70 different event log mapped to the MITRE…☆93Updated 6 months ago
- Blueteam operational triage registry hunting/forensic tool.☆150Updated 4 months ago
- ☆20Updated 4 years ago
- Aggregated Indicators of Compromise collected and cross-verified from multiple open and community-supported sources, enriched and ranked …☆36Updated last year
- Powershell Event Tracing Toolbox☆78Updated 3 years ago
- ☆38Updated 4 years ago
- Sigma detection rules for hunting with the threathunting-keywords project☆57Updated 10 months ago
- Forensic Artifact Collection Tool Matrix☆92Updated last year
- Provides an advanced baseline to implement a secure Windows auditing strategy on Windows OS.☆57Updated 7 months ago
- Blue Team detection lab created with Terraform and Ansible in Azure.☆175Updated last year
- Powershell module for VMWare vSphere forensics☆157Updated last year
- evtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files.☆156Updated 4 years ago
- The Github project for The Defender's Guide by Luke Paine and Jonathan Johnson☆159Updated 2 years ago
- ☆65Updated 3 years ago
- Harvest Linux forensic data for operational triage of an event.☆52Updated last month
- Full of public notes and Utilities☆129Updated 10 months ago
- Collection of PowerShell functinos and scripts a Blue Teamer might use☆89Updated 2 years ago
- Pushes Sysmon Configs☆90Updated 4 years ago
- TheHiveIRPlaybook is a collection of TheHive case templates used for Incident Response☆13Updated 5 years ago
- Documentation site for Velociraptor☆58Updated this week
- ☆67Updated last month
- ☆43Updated 3 years ago
- A Python package is used to execute Atomic Red Team tests (Atomics) across multiple operating system environments.☆137Updated last year