GossiTheDog / Monitoring
☆40Updated 3 weeks ago
Alternatives and similar repositories for Monitoring:
Users that are interested in Monitoring are comparing it to the libraries listed below
- This guide describes a process for developing Cyber Threat Intelligence Priority Intelligence Requirements☆116Updated last year
- A repository to help CTI teams tackle the challenges around collection and research by providing guidance from experienced practitioners☆75Updated 3 months ago
- A collection of tips for using MISP.☆74Updated 2 months ago
- LotL RMM☆128Updated this week
- Project based on RegRipper, to extract add'l value/pivot points from TLN events file☆84Updated last week
- Cyber Underground General Intelligence Requirements☆90Updated last year
- A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.☆151Updated 9 months ago
- pySigma Splunk backend☆36Updated this week
- This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.☆106Updated last year
- Harness the power of Splunk for your investigations☆88Updated 2 months ago
- Convert a variety of log formats to CSV while enriching detected IPs with Geolocation, ASN, DNS, WhoIs, Shodan InternetDB and Threat Indi…☆102Updated 4 months ago
- Rules Shared by the Community from 100 Days of YARA 2023☆77Updated last year
- Repository documenting how Threat Intelligence and / or a Threat Intelligence Platform can prove its value to an organisation.☆51Updated 3 months ago
- ☆5Updated 3 months ago
- ☆66Updated 2 months ago
- Open Threat-Informed Detection Engineering☆37Updated last month
- A repository to share publicly available Velociraptor detection content☆126Updated this week
- A list of RMMs designed to be used in automation to build alerts☆108Updated 3 months ago
- This repository is for Indicators of Compromise (IOCs) from Zscaler ThreatLabz public reports☆67Updated 3 months ago
- A browser extension for threat hunting that provides one UI for different SIEMs/EDRs and simplifies investigation☆76Updated 9 months ago
- Repository of public reference frameworks for the DFIR community.☆115Updated last year
- ☆84Updated last week
- Scripts to integrate DFIR-IRIS, MISP and TimeSketch☆33Updated 3 years ago
- A home for detection content developed by the delivr.to team☆67Updated 2 weeks ago
- Lightweight Python-Based Malware Analysis Pipeline☆34Updated last week
- Import CrowdStrike Threat Intelligence into your instance of MISP☆43Updated 4 months ago
- Collection of Remote Management Monitoring tool artifacts, for assisting forensics and investigations☆83Updated 6 months ago
- Powershell module for VMWare vSphere forensics☆149Updated 3 months ago
- A repository of my own Sigma detection rules.☆157Updated 5 months ago
- Slides of my public talks☆54Updated last year