MISP / ansible
MISP - Ansible installation script
☆22Updated 6 years ago
Alternatives and similar repositories for ansible:
Users that are interested in ansible are comparing it to the libraries listed below
- Validate IOC from MISP ; Export results and iocs to SIEM and sensors using syslog and CEF format☆14Updated 8 years ago
- Python script that gets IOC from MISP and converts it into BRO intel files.☆13Updated 8 years ago
- IntelMQ command line tool to process events and send out email notifications.☆9Updated this week
- API to access the Redis database of a BGP Ranking instance.☆17Updated 7 years ago
- Maltego Transform to put entities into MISP events☆26Updated 3 years ago
- Extract information from MISP via the API☆15Updated 8 years ago
- FireEye Alert json files to MISP Malware information sharing plattform (Alpha)☆32Updated 7 years ago
- A collection of bro_scripts and signatures☆26Updated 5 years ago
- Traceroute improved wrapper for CSIRT and CERT operators☆37Updated 5 months ago
- Exporting MISP event attributes to yara rules usable with Thor apt scanner☆24Updated 7 years ago
- Build Automated Machine Images for MISP☆28Updated last year
- Push "BAD" IPs/Networks into QRadar's "Remote Networks", tag them properly, and use them!☆18Updated 11 years ago
- ansible role to setup MISP, Malware Information Sharing Platform & Threat Sharing☆53Updated 3 months ago
- Cli interface to threatcrowd.org☆19Updated 7 years ago
- A tool to convert MISP XML files (events and attributes) into graphs☆20Updated 7 years ago
- Scripts used to create ISO installers of ROCK for offline installation.☆10Updated 2 years ago
- Web based analysis platform for use with the AWS_IR command line tool.☆17Updated 8 years ago
- ☆15Updated 7 years ago
- Threat Intelligence distribution☆30Updated 9 years ago
- scripts to help beginners program in Bro☆20Updated 11 years ago
- Bro Intel Feed Linter☆26Updated 5 years ago
- OSSEC Decoder & Rulesets for Sysmon Events☆15Updated 9 years ago
- The Bro/Zeek language cheat sheet☆52Updated 12 years ago
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆16Updated 4 years ago
- Beholder is a shell script which installs and configures essentials to peer into your network activity.☆19Updated 7 years ago
- Cyber Analytics Platform and Examination System (CAPES) Project Page☆60Updated 5 years ago
- Generates visualizations from the output of flow tools such as SiLK.☆35Updated 8 years ago
- Python-based cloud node for local use☆11Updated 7 years ago
- Python library for the ArcSight logger REST API☆27Updated 3 years ago
- CRITs IOC Visualization in Maltego☆28Updated 10 years ago