OSSEM Data Dictionaries
☆68Jan 22, 2025Updated last year
Alternatives and similar repositories for OSSEM-DD
Users that are interested in OSSEM-DD are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- OSSEM Common Data Model☆56Sep 20, 2022Updated 4 years ago
- OSSEM Detection Model☆182Oct 11, 2022Updated 3 years ago
- OSSEM Modular☆27Jun 29, 2020Updated 6 years ago
- A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for…☆40Aug 18, 2022Updated 4 years ago
- ☆20Sep 3, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Mapping Corelight or Zeek data to Elastic Common Schema fields☆33Updated this week
- Open Source Security Events Metadata (OSSEM)☆1,300Feb 27, 2023Updated 3 years ago
- Zeek package to create JSON formatted logs to stream into data analysis systems.☆31Dec 3, 2025Updated 9 months ago
- TheHiveIRPlaybook is a collection of TheHive case templates used for Incident Response☆13Jul 13, 2020Updated 6 years ago
- ATT&CK Powered Suit is a browser extension that puts the complete MITRE ATT&CK® knowledge base at your fingertips with text search, conte…☆83Apr 29, 2026Updated 4 months ago
- Mapping Corelight or Zeek data to Elastic Common Schema logs☆11Updated this week
- Zeek support for Community ID flow hashing.☆37Jul 11, 2023Updated 3 years ago
- Writing Your Own Ticket to the Cloud Like APT: A Deep-dive to AD FS Attacks, Detections, and Mitigations☆13Dec 9, 2022Updated 3 years ago
- Elastic version of SOC prime watcher rules☆30Oct 14, 2024Updated last year
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Microsoft Sentinel2Go is an open source project developed to expedite the deployment of a Microsoft Sentinel research lab.☆596Jan 22, 2025Updated last year
- OCSF Schema Validation☆12Updated this week
- Re-play Security Events☆1,824Mar 20, 2024Updated 2 years ago
- Collection of useful, up to date, Carbon Black Response Queries☆87Oct 23, 2020Updated 5 years ago
- Analyze binaries collected in VMware Carbon Black EDR against Yara rules.☆39Jul 1, 2026Updated 2 months ago
- Collect autorun records from running system☆64Jan 21, 2022Updated 4 years ago
- Common Malware Techniques☆13Mar 26, 2023Updated 3 years ago
- Building environments to replicate small networks and deploy applications☆335Jan 9, 2026Updated 8 months ago
- Logs key Windows process performance metrics. #nsacyber☆71Dec 8, 2022Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- This content is analysis and research of the data sources currently listed in ATT&CK.☆412Sep 13, 2023Updated 3 years ago
- Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.☆75Jan 18, 2022Updated 4 years ago
- MSTIC Notebook Components☆35Jul 8, 2026Updated 2 months ago
- GitHub action for validating Microsoft Sentinel detection rules☆14May 22, 2023Updated 3 years ago
- Windows Security Logging☆44Jul 17, 2022Updated 4 years ago
- Download a Bunch of Malware for Demos and Testing☆13Sep 28, 2018Updated 7 years ago
- Microsoft Threat Intelligence Security Tools☆2,004Updated this week
- Adversarial Interception Mission Oriented Discovery and Disruption Framework, or AIMOD2, is a structured threat hunting approach to proac…☆91Sep 16, 2023Updated 3 years ago
- A cybersecurity game in Azure Data Explorer☆176Jul 12, 2024Updated 2 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Collection of Event ID ressources useful for Digital Forensics and Incident Response☆665Jun 19, 2024Updated 2 years ago
- This repository is used by FalconForce to release parts of the internal tools used for maintaining, validating and automatically deployin…☆17Mar 10, 2023Updated 3 years ago
- Packer scripts for creation of Windows images with cloudbase-init☆15Jan 29, 2024Updated 2 years ago
- D-Scan project for office document analysis and generating flow diagram of macro in documents. For demo visit☆29Jan 10, 2026Updated 8 months ago
- Pointing cybersecurity teams to thousands of detection rules and offensive security tests aligned with common attacker techniques☆143Feb 25, 2024Updated 2 years ago
- TAXII 2.0 Server implemented in Node JS with MongoDB backend☆12Jan 3, 2023Updated 3 years ago
- Splunk Security Content☆1,698Updated this week