GossiTheDog / Monitoring

Related projects: ⓘ

• CERN-CERT / pDNSSOC
  Leveraging MISP indicators via a pDNS-based infrastructure as a poor man’s SOC.
  ☆48Updated 2 weeks ago
• redhat-infosec / priority-intelligence-requirements-dev
  This guide describes a process for developing Cyber Threat Intelligence Priority Intelligence Requirements
  ☆113Updated 9 months ago
• docintelapp / DocIntel
  Open Source Platform for storing, organizing, and searching documents related to cyber threats
  ☆154Updated 10 months ago
• YARAHQ / yara-forge
  Automated YARA Rule Standardization and Quality Assurance Tool
  ☆154Updated this week
• cudeso / misp-tip-of-the-week
  A collection of tips for using MISP.
  ☆74Updated 5 months ago
• joeavanzato / LogBoost
  Convert a variety of log formats to CSV while enriching detected IPs with Geolocation, ASN, DNS, WhoIs, Shodan InternetDB and Threat Indi…
  ☆91Updated 2 months ago
• keydet89 / Events-Ripper
  Project based on RegRipper, to extract add'l value/pivot points from TLN events file
  ☆74Updated 3 weeks ago
• korniko98 / pivot-atlas
  ☆79Updated last month
• SigmaHQ / pySigma-backend-elasticsearch
  pySigma Elasticsearch backend
  ☆41Updated 3 weeks ago
• zolderio / misp-to-sentinel
  Azure function to insert MISP data in to Azure Sentinel
  ☆30Updated last year
• ail-project / lacus
  Lacus is a capturing system using playwright, as a web service.
  ☆39Updated this week
• blackberry / threat-research-and-intelligence
  BlackBerry Threat Research & Intelligence
  ☆90Updated 11 months ago
• intel471 / CU-GIR
  Cyber Underground General Intelligence Requirements
  ☆85Updated 7 months ago
• LivingInSyn / RMML
  A list of RMMs designed to be used in automation to build alerts
  ☆103Updated last week
• ANSSI-FR / DFIR4vSphere
  Powershell module for VMWare vSphere forensics
  ☆138Updated last year
• MISP / misp-playbooks
  MISP Playbooks
  ☆167Updated last month
• infobloxopen / threat-intelligence
  ☆62Updated this week
• swisscom / ArtifactCollectionMatrix
  Forensic Artifact Collection Tool Matrix
  ☆70Updated 2 years ago
• blueteam0ps / memOptix
  A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.
  ☆94Updated last year
• CrowdStrike / MISP-tools
  Import CrowdStrike Threat Intelligence into your instance of MISP
  ☆40Updated this week
• Casualtek / Cyberwatch
  Building a consolidated RSS feed for articles about cyberattacks
  ☆54Updated this week
• Errum / IntelArchitectureMap
  Intelligence Architecture Mind Map
  ☆110Updated 6 months ago
• CYBERCOM-Malware-Alert / IOCs
  ☆19Updated 2 years ago
• cerebrate-project / cerebrate
  Cerebrate is an open-source platform meant to act as a trusted contact information provider and interconnection orchestrator for other se…
  ☆82Updated this week
• 0x706972686f / RMM-Catalogue
  ☆72Updated last month
• NUKIB / misp
  Docker image for MISP
  ☆109Updated last week
• mf1d3l / Splunk4DFIR
  Harness the power of Splunk for your investigations
  ☆66Updated last month
• gertjanbruggink / metrics
  This directory features proven systems that demonstrate value to your threat-informed efforts using metrics.
  ☆93Updated 6 months ago
• blueteam0ps / AllthingsTimesketch
  This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.
  ☆90Updated 11 months ago
• telekom-security / malware_analysis
  This repository contains analysis scripts, YARA rules, and additional IoCs related to our Telekom Security blog posts.
  ☆108Updated 9 months ago