Splunk App to assist Sysmon Threat Hunting
☆37Mar 7, 2017Updated 9 years ago
Alternatives and similar repositories for app_splunk_sysmon_hunter
Users that are interested in app_splunk_sysmon_hunter are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆13Feb 6, 2018Updated 8 years ago
- Sysmon Splunk App☆48Oct 1, 2026Updated last month
- Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.☆946Dec 12, 2023Updated 2 years ago
- Powershell scripts using CyCLI.☆10May 22, 2019Updated 7 years ago
- Deploy and maintain Symon through the Splunk Deployment Sever☆32Jul 30, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Splunk app for Threat hunting☆15Nov 15, 2018Updated 7 years ago
- A series of Bro Scripts created for detection purposes.☆19Nov 18, 2016Updated 9 years ago
- Mass Triage Tools☆20Sep 9, 2026Updated last month
- Maps process creation logged by Sysmon uses Google Org Chart API☆23Mar 5, 2016Updated 10 years ago
- Detecting DNS Spoofing, DNS Tunneling, DNS Exfiltration☆37Sep 28, 2015Updated 11 years ago
- Qakbot Registry Key Configuration Decryptor☆14Dec 20, 2021Updated 4 years ago
- Powershell Functions to interact with TheHive-Project☆11Jun 27, 2019Updated 7 years ago
- A set of Splunk workflow action definitions to export field values to CyberChef for further analysis.☆13Jan 22, 2018Updated 8 years ago
- Examples for the CyCLI Powershell module☆12Mar 8, 2019Updated 7 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆16May 20, 2022Updated 4 years ago
- ☆15Jan 10, 2019Updated 7 years ago
- Sysmon Tools for PowerShell☆233Aug 17, 2018Updated 8 years ago
- Pragmatic Network Security for Cloud and Hybrid Networks☆10Nov 24, 2015Updated 10 years ago
- Splunk App for MITRE Att&CK Navigator(TM)☆23Mar 25, 2021Updated 5 years ago
- Python scripts to download, parse, and enrich scans.io study data and load into Splunk for research, threat intelligence gathering, and s…☆20Oct 23, 2026Updated last week
- ☆15Aug 11, 2019Updated 7 years ago
- A Docker container for Moloch based on minimal Debian☆26Jan 25, 2016Updated 10 years ago
- A few scripts I put together for testing purposes and to automate a few capabilities while doing IR. These scripts are also part of my bl…☆53Jan 24, 2018Updated 8 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- OG Atomic Red Team☆30Jun 12, 2018Updated 8 years ago
- LNK to JSON☆14Mar 7, 2019Updated 7 years ago
- Sharing my BITS☆13Feb 23, 2018Updated 8 years ago
- Repository of yara rules☆60Nov 29, 2022Updated 3 years ago
- This module installs and configures MISP (Malware Information Sharing Platform)☆14Updated this week
- InvestigationPlaybookSpec☆70Sep 26, 2017Updated 9 years ago
- Finding SSL Blindspots for Red Teams☆33Jul 28, 2020Updated 6 years ago
- A Logstash grok filter to parse and tokenize the message field of Windows eventlog entries.☆12May 10, 2016Updated 10 years ago
- This is a repository from Adam Swan and I's presentation on Windows Logs Zero 2 Hero.☆22Jan 30, 2018Updated 8 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆20Dec 19, 2017Updated 8 years ago
- Inject DLL Prototype using Microsoft.Windows.ACTCTX COM Object☆21Feb 16, 2017Updated 9 years ago
- Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into …☆832Nov 5, 2023Updated 2 years ago
- An installation script to help with the setup of a Kali VM for The Hacker Playbook: Practical Guide To Penetration Testing by Peter Kim☆17Jul 21, 2015Updated 11 years ago
- Configuration guidance for implementing collection of security relevant Windows Event Log events by using Windows Event Forwarding. #nsac…☆893Nov 17, 2020Updated 5 years ago
- Splunk app for visualization of DMARC RUA mails☆15Sep 26, 2025Updated last year
- Mitre Att&ck Technique Emulation☆82Mar 6, 2019Updated 7 years ago