PaloAltoNetworks / autofocus-client-library

Related projects ⓘ

Alternatives and complementary repositories for autofocus-client-library

• PaloAltoNetworks / autofocus-lenz
  A command line utility to aid in using autofocus for IR and research
  ☆27Updated 5 years ago
• PaloAltoNetworks / minemeld-node-prototypes
  Prototypes for MineMeld nodes
  ☆39Updated 3 years ago
• PaloAltoNetworks / minemeld-webui
  WebUI of MineMeld
  ☆43Updated last year
• PaloAltoNetworks / minemeld-core
  Engine of MineMeld
  ☆141Updated last year
• PaloAltoNetworks / minemeld-ansible
  Ansible playbook for installing MineMeld on Linux
  ☆48Updated 3 years ago
• xme / misp-docker
  Docker container for MISP
  ☆96Updated 6 years ago
• carbonblack / cb-event-forwarder
  Subscribe to raw VMware Carbon Black EDR event feed and forward to another system, such as Splunk.
  ☆73Updated 6 months ago
• capesstack / capes
  Cyber Analytics Platform and Examination System (CAPES) Project Page
  ☆60Updated 5 years ago
• fatemabw / bro-scripts
  ☆17Updated 4 years ago
• CrowdStrike / cs-bro
  Bro scripts written by CrowdStrike Services
  ☆146Updated 3 years ago
• blacktop / docker-bro
  Bro IDS Dockerfile
  ☆129Updated 5 years ago
• PaloAltoNetworks / Splunk_TA_paloalto
  The Palo Alto Networks Add-on for Splunk allows a Splunk® Enterprise or Splunk Cloud administrator to collect data from Palo Alto Network…
  ☆20Updated 4 years ago
• carbonblack / cbc-syslog
  Syslog Connector for the Carbon Black Cloud
  ☆28Updated last month
• aboutsecurity / rastrea2r
  Collecting & Hunting for IOCs with gusto and style
  ☆116Updated 6 years ago
• PaloAltoNetworks / report_to_misp
  Parse a report and import the events into MISP
  ☆28Updated 9 years ago
• PaloAltoNetworks / Splunk-Apps
  Palo Alto Networks App for Splunk leverages the data visibility provided by Palo Alto Networks next-generation firewalls and endpoint sec…
  ☆106Updated last month
• seanthegeek / pyldfire
  A Python module for Palo Alto Networks' WildFire API
  ☆11Updated 4 years ago
• carbonblack / cb-taxii-connector
  Connector for pulling and converting STIX information from TAXII Service Providers into CB Feeds.
  ☆15Updated 2 years ago
• zeek / package-manager
  A package manager for Zeek
  ☆43Updated 2 months ago
• carbonblack / cbfeeds
  Carbon Black Feeds
  ☆70Updated last year
• zeek / zeek-docker
  Docker files for building Zeek.
  ☆86Updated last year
• zeek / cheat-sheet
  The Bro/Zeek language cheat sheet
  ☆51Updated 11 years ago
• pevma / rule2alert
  Improvements of/over the original rule2alert
  ☆56Updated 9 years ago
• eclecticiq / cabby
  TAXII client implementation from EclecticIQ
  ☆98Updated 3 years ago
• csirtgadgets / massive-octo-spice
  DEPRECATED - USE v3 (bearded-avenger)
  ☆227Updated 6 years ago
• shadow-box / Palo-Alto-Networks-ELK-Stack
  Configuration for a Palo Alto Networks fed ELK Stack with Visualizations
  ☆74Updated 5 years ago
• cvandeplas / ELK-forensics
  ELK configuration files for Forensic Analysts and Incident Handlers (unmaintained)
  ☆179Updated 5 years ago