Alternatives and similar repositories for Axon-Content

Users that are interested in Axon-Content are comparing it to the libraries listed below

• acquiredsecurity / Sentinel-One-STAR-Rules-Threat-Hunts
  SentinelOne STAR Rules
  ☆71Updated last year
• keyboardcrunch / sentinelone-queries
  Repository of SentinelOne Deep Visibility queries.
  ☆135Updated 4 years ago
• weslambert / velocistack
  ☆54Updated last year
• SentineLabs / S1QL-Queries
  ☆67Updated 2 years ago
• bk-cs / rtr
  Real-time Response scripts and schema
  ☆122Updated 3 months ago
• LogRhythm-Tools / LogRhythm.Tools
  LogRhythm PowerShell Toolkit
  ☆53Updated last month
• ethack / tht
  Threat Hunting Toolkit is a Swiss Army knife for threat hunting, log processing, and security-focused data science
  ☆147Updated last week
• PacktPublishing / Practical-Threat-Detection-Engineering
  Practical Threat Detection Engineering, Published by Packt
  ☆84Updated 2 years ago
• dlcowen / sansfor509
  Public script from SANS FOR509 Enterprise Cloud Incident Response
  ☆218Updated 3 months ago
• secure-cake / rapid-endpoint-investigations
  Scripts for rapid Windows endpoint "tactical triage" and investigations with Velociraptor and KAPE
  ☆178Updated 3 weeks ago
• ReconInfoSec / velociraptor-to-timesketch
  ☆14Updated last year
• msraju / Incident-Response-Playbooks
  ☆47Updated 3 years ago
• hulkmode / echothreat
  ☆32Updated 5 months ago
• splunk / contentctl
  Splunk Content Control Tool
  ☆127Updated this week
• activecm / threat-tools
  Tools for simulating threats
  ☆199Updated 2 years ago
• cudeso / misp2sentinel
  MISP to Sentinel integration
  ☆79Updated 2 months ago
• blueteam0ps / AllthingsTimesketch
  This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.
  ☆118Updated 2 years ago
• weslambert / velociraptor-docker
  Docker image for Velocidex Velociraptor
  ☆145Updated last month
• keyboardcrunch / SentinelOne-Query-Navigator
  Web based S1 query navigator for one-click threat hunting
  ☆25Updated 5 years ago
• siriussecurity / dettectinator
  Dettectinator - The Python library to your DeTT&CT YAML files.
  ☆119Updated 3 weeks ago
• magicsword-io / sigconverter.io
  An opensource sigma conversion tool built using pysigma
  ☆157Updated 3 weeks ago
• randomaccess3 / Awesome-BEC
  Repository of attack and defensive information for Business Email Compromise investigations
  ☆275Updated 9 months ago
• SophosRapidResponse / OSQuery
  ☆88Updated 11 months ago
• pe3zx / crowdstrike-falcon-queries
  A collection of Splunk's Search Processing Language (SPL) for Threat Hunting with CrowdStrike Falcon
  ☆214Updated 5 years ago
• strozfriedberg / greppin-logs
  2021 SANS DFIR Summit: Greppin' Logs
  ☆20Updated 3 months ago
• pfpt-andrew / Rapid-Response-Reporting
  RRR (Rapid Response Reporting) is a collection of Incident Response Report objects. They are designed to help incident responders provid…
  ☆37Updated 3 years ago
• StrangeBeeCorp / thehive-templates
  ☆28Updated 2 months ago
• CrowdStrike / logscale-community-content
  This repository contains Community and Field contributed content for LogScale
  ☆315Updated 2 weeks ago
• UncoderIO / Uncoder_IO
  An IDE and translation engine for detection engineers and threat hunters. Be faster, write smarter, keep 100% privacy.
  ☆172Updated 2 months ago
• redcanaryco / surveyor
  A cross-platform baselining, threat hunting, and attack surface analysis tool for security teams.
  ☆255Updated 10 months ago