OTRF / sigmaLinks
Generic Signature Format for SIEM Systems
☆14Updated 4 years ago
Alternatives and similar repositories for sigma
Users that are interested in sigma are comparing it to the libraries listed below
Sorting:
- Notebooks created to attack and secure Active Directory environments☆28Updated 6 years ago
- Basic c2-matrix analysis enviroment using Suricata + Wazuh + Elastic stack☆12Updated 5 years ago
- These are some of the commands which I use frequently during Malware Analysis and DFIR.☆24Updated last year
- Creates an ATT&CK Navigator map of an Adversary Emulation Plan☆17Updated 4 years ago
- IOCPARSER.COM is a Fast and Reliable service that enables you to extract IOCs and intelligence from different data sources.☆35Updated 3 years ago
- Pure Honeypots with an automated bash script☆20Updated 4 years ago
- Windows Security Logging☆43Updated 3 years ago
- Log aggregation, analysis, alerting and correlation for Windows, Syslog and text based logs.☆23Updated 9 years ago
- Caldera plugin to deploy "humans" to emulate user behavior on systems☆29Updated last year
- Automatic detection engineering technical state compliance☆55Updated last year
- A few quick recipes for those that do not have much time during the day☆22Updated last year
- ☆15Updated 4 years ago
- PowerShell Memory Pulling script☆19Updated 10 years ago
- An experimental Velociraptor implementation using cloud infrastructure☆26Updated 3 weeks ago
- Workflows for Shuffle☆24Updated 3 years ago
- ☆44Updated 5 months ago
- A script to assist in processing forensic RAM captures for malware triage☆26Updated 4 years ago
- Powershell / C# based cross platform forensic framework based for live incident response☆23Updated 5 years ago
- Python parser for Red Canary's Atomic Red Team Yamls☆27Updated 6 years ago
- Web interface for monitoring and interacting with Netflow data stored in Silk repositories.☆13Updated 6 years ago
- A CALDERA plugin☆25Updated 2 months ago
- Send High & New Incidents to The Hive incident management Platform☆18Updated 4 years ago
- Incident Response Network Tools☆24Updated 4 years ago
- Cont3xt intends to centralize and simplify a structured approach to gathering contextual intelligence in support of technical investigati…☆38Updated last year
- An extendable tool to extract and aggregate IoCs from threat feeds☆33Updated last year
- A collection of tools adversaries commonly use in an attack.☆14Updated last year
- ☆35Updated 4 years ago
- ☆13Updated 6 years ago
- Audit Powershell and search from known keywords in history #Blueteam☆25Updated 5 years ago
- Powershell Scripts to work on Crowdstrike Falcon that pull back raw data relevant to forensic investigation☆23Updated last year