HASecuritySolutions / TacticalDataHandlingatScalewithLogstash
Contains log samples and configuration files for the Tactical Data Handling at Scale with Logstash course
☆11Updated 5 years ago
Alternatives and similar repositories for TacticalDataHandlingatScalewithLogstash:
Users that are interested in TacticalDataHandlingatScalewithLogstash are comparing it to the libraries listed below
- Web app that provides basic navigation and annotation of ATT&CK matrices☆16Updated 4 years ago
- Provides detection capabilities and log conversion to evtx or syslog capabilities☆53Updated 2 years ago
- ☆34Updated 3 years ago
- Recon Hunt Queries☆77Updated 3 years ago
- A few quick recipes for those that do not have much time during the day☆22Updated 5 months ago
- Dashboards for conducting forensic investigation using windows events in Kibana☆17Updated 6 years ago
- ☆18Updated 3 years ago
- Actionable analytics designed to combat threats based on MITRE's ATT&CK.☆22Updated 5 years ago
- automate your MISP installs☆68Updated 4 years ago
- Threat intelligence and threat detection indicators (IOC, IOA)☆52Updated 4 years ago
- Elasticsearch/Kibana environment and log data for Sigma workshop☆26Updated 5 years ago
- SOC Workflow App helps Security Analysts and Threat Hunters explore suspicious events, look into raw events arriving at the Elastic Stack…☆94Updated 2 years ago
- THOR MITRE ATT&CK Framework Coverage☆24Updated 4 years ago
- ☆77Updated 5 years ago
- Slides and Other Resources from my latest Talks and Presentations☆24Updated 4 years ago
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆16Updated 4 years ago
- Integrating Sysinternals Autoruns’ logs into Security Onion☆31Updated last year
- Sharing Threat Hunting runbooks☆25Updated 5 years ago
- Utilizing your Threat data from a MISP instance into CarbonBlack Response by exposing the data in the Threat Intelligence Feed.☆19Updated 2 years ago
- Expert Investigation Guides☆51Updated 4 years ago
- pollen - A command-line tool for interacting with TheHive☆35Updated 5 years ago
- A completely unsupported set of scripts used in SANS FOR572, Advanced Network Forensics and Analysis☆26Updated 4 months ago
- pocket guide for core threat hunting concepts☆23Updated 4 years ago
- ☆33Updated 2 years ago
- A script to create and assign SOP tasks into the cases☆19Updated 4 years ago
- Repository for SPEED SIEM Use Case Framework☆53Updated 4 years ago
- ☆34Updated 4 years ago
- A tool to modify timestamps in a packet capture to a user selected date☆31Updated 3 years ago
- Threat Hunting with ELK Workshop (InfoSecWorld 2017)☆66Updated 7 years ago
- Best practices in threat intelligence☆46Updated 2 years ago