This package allows the use of a custom Elastalert Alert which creates alerts with observables in TheHive using TheHive4Py.
☆26May 18, 2021Updated 5 years ago
Alternatives and similar repositories for elastalert_hive_alerter
Users that are interested in elastalert_hive_alerter are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Python API Client for TheHive☆244Oct 4, 2026Updated 3 weeks ago
- A collection of Cortex Analyzers and Responders for TheHive/Cortex☆13Jan 29, 2020Updated 6 years ago
- This is a python tool aiming to make using TheHive webhooks easier.☆28Oct 23, 2020Updated 6 years ago
- Checks observables/ioc in TheHive/Cortex against the MISP warningslists☆14Dec 27, 2017Updated 8 years ago
- Sysmon Tools for PowerShell☆12Aug 17, 2018Updated 8 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Miscelaneous Dockers☆47Aug 26, 2021Updated 5 years ago
- This repository contains a few examples of actions that can be added to rules within Elastic Security.☆24Feb 6, 2025Updated last year
- Ansible role to install auditbeat for security monitoring. (Ruleset included)☆15Nov 16, 2023Updated 2 years ago
- Powershell Functions to interact with TheHive-Project☆11Jun 27, 2019Updated 7 years ago
- Scripts for TheHive.☆23Nov 15, 2019Updated 6 years ago
- Threat hunting repo for my independent study on threat hunting with OSQuery☆27Jan 16, 2018Updated 8 years ago
- Threat Feed Aggregation, Made Easy☆169Jul 13, 2020Updated 6 years ago
- Elastic Beat for fetching and shipping Office 365 audit events☆66Sep 9, 2020Updated 6 years ago
- incident response scripts☆18Mar 4, 2019Updated 7 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆15Aug 20, 2019Updated 7 years ago
- PowerGRR is an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting.☆57Mar 18, 2022Updated 4 years ago
- Documentation of TheHive☆394Sep 20, 2023Updated 3 years ago
- ☆29Feb 16, 2021Updated 5 years ago
- Top DNS Measurement for Bro☆10Aug 22, 2020Updated 6 years ago
- Enhanced MITRE auditd rules for linux☆10Nov 6, 2018Updated 7 years ago
- SACTI - Securely aggregate CTI sightings and report them on MISP☆14Oct 24, 2022Updated 4 years ago
- Python script to automatically create sigma rules from The hive observables☆25Mar 17, 2019Updated 7 years ago
- Repository for the Deprecated MITRE Capture the Flag scoreboard.☆11Sep 25, 2017Updated 9 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Collect SIEM logs from the Mimecast API using Python. Currently supports multiple endpoints. Use this to be able to easily and quickly fo…☆11Apr 4, 2024Updated 2 years ago
- Integrating Sysinternals Autoruns’ logs into Security Onion☆31Feb 20, 2024Updated 2 years ago
- A Python implementation of the Community ID flow hashing standard☆24Nov 29, 2023Updated 2 years ago
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆17Jan 6, 2021Updated 5 years ago
- A tool to modify timestamps in a packet capture to a user selected date☆31Aug 11, 2021Updated 5 years ago
- A Golang API for TheHive☆13Sep 3, 2020Updated 6 years ago
- Python toolkit for MITRE identifiers (CVE, CPE, CWE, CVSS) and NVD databases.☆13Aug 23, 2011Updated 15 years ago
- Parse wazuh[HIDS] alerts into ECS mapping using Filebeat☆28Jul 21, 2020Updated 6 years ago
- Place for resources used during the Mordor Detection hackathon event featuring APT29 ATT&CK evals datasets☆145Oct 12, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆13Jul 30, 2021Updated 5 years ago
- Maltego entity pack encompassing the entire STIX 1.2 data model and a targeted subset of the CybOX 2.1 data model☆11Mar 24, 2016Updated 10 years ago
- Actionable analytics designed to combat threats☆1,008May 25, 2022Updated 4 years ago
- Query and cross-check TheHive (SIRP) alerts based on set severity statuses, and automatically perform various escalations based on your c…☆10Dec 8, 2022Updated 3 years ago
- Synapse: a Meta Alert Feeder for TheHive, a Security Incident Response Platform☆72Jul 28, 2023Updated 3 years ago
- A repository to share contributions related to TheHive Project☆23Sep 15, 2021Updated 5 years ago
- Integration between MISP platform and McAfee MVISION EDR☆14Mar 14, 2022Updated 4 years ago