LogCraftIO / logcraft-cli
Detection-as-Code CI/CD pipeline for modern security operations (SIEM, EDR, XDR, ...)
☆21Updated last week
Alternatives and similar repositories for logcraft-cli:
Users that are interested in logcraft-cli are comparing it to the libraries listed below
- Convert Sigma rules to LogRhythm searches☆20Updated 3 years ago
- Import CrowdStrike Threat Intelligence into your instance of MISP☆44Updated last week
- Repo for Automations and other solutions for Elastic SIEM/Security.☆18Updated 3 years ago
- Web based S1 query navigator for one-click threat hunting☆18Updated 4 years ago
- ☆16Updated 4 years ago
- Microsoft Sentinel, Defender for Endpoint - KQL Detection Packs☆52Updated last year
- Incident Response Report Using GitHub-Sphinx☆20Updated 5 years ago
- Notes on managing and coordinating the response to major cyber incidents☆40Updated 4 years ago
- Tool to extract Sessions, MessageID(s) and find the emails belonging to MessageID(s). This script utilizes the MailItemsAccessed features…☆39Updated 4 years ago
- Collection of Dashboards for Threat Hunting and more!☆65Updated 4 years ago
- Digital Forensic Analysis and Incident Response Playbooks to handle real world security incidents☆39Updated 10 months ago
- ☆72Updated 5 months ago
- This code snippet retrieves Azure Sentinel rules that are mapped to MITRE ATT&CK Framework and generates the related MITRE D3FEND defense…☆71Updated 3 years ago
- Defender Resource Hub☆15Updated 2 weeks ago
- Using QRadar API☆20Updated 7 years ago
- Workflows for Shuffle☆21Updated 2 years ago
- An example of how to deploy a Detection as Code pipeline using Sigma Rules, Sigmac, Gitlab CI, and Splunk.☆54Updated 3 years ago
- The Project can be used to integrate QRadar with MISP Threat Sharing Platform☆39Updated 2 years ago
- Summiting the Pyramid is a research project focused on engineering cyber analytics to make adversary evasion more difficult. The research…☆36Updated this week
- Hunting Queries for Defender ATP☆81Updated last week
- Threat Detection & Anomaly Detection rules for popular open-source components☆51Updated 2 years ago
- Knowing which rule should trigger according to the redcannary test☆11Updated 4 months ago
- Cybersecurity Incident Response Plan☆89Updated 4 years ago
- Open-source Fabric templates for cybersecurity and compliance☆16Updated 2 months ago
- Specific guidance and configuration scripts based on Microsoft-recommended security configuration baselines for Windows.☆13Updated 4 years ago
- The idea is simply to save some quick notes that will make it easier for Splunk users to leverage KQL (Kusto), especially giving projects…☆40Updated 4 years ago
- Transform EQL detection rules to VQL artifacts☆11Updated 3 years ago
- A collection of Cortex Analyzers and Responders for TheHive/Cortex☆13Updated 5 years ago
- Provides an advanced baseline to implement a secure Windows auditing strategy on Windows OS.☆52Updated 2 months ago
- This repository contains Splunk queries to hunt some anomalies☆39Updated 2 years ago