Threat Hunting with ELK Workshop (InfoSecWorld 2017)
☆64Oct 31, 2017Updated 9 years ago
Alternatives and similar repositories for ELK-Hunting
Users that are interested in ELK-Hunting are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PowerShell Script for Agentless Incident Response☆25Apr 5, 2018Updated 8 years ago
- This repository contains all the config files and scripts used for our Open Source Endpoint monitoring project.☆35Jul 8, 2019Updated 7 years ago
- My personal experience in Threat Hunting and knowledge gained so far.☆19May 27, 2017Updated 9 years ago
- Reference sheet for Threat Hunting Professional Course☆26Mar 10, 2019Updated 7 years ago
- ThreatHunt is a PowerShell repository that allows you to train your threat hunting skills.☆134Jul 25, 2019Updated 7 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Splunk code (SPL) for serious threat hunters and detection engineers.☆294Jan 15, 2024Updated 2 years ago
- Powershell collection designed to assist in Threat Hunting Windows systems.☆27Apr 13, 2018Updated 8 years ago
- Auxiliary scripts for Incident Response with ELK☆11Oct 7, 2015Updated 11 years ago
- A Windows Event Processing Utility☆48Feb 21, 2018Updated 8 years ago
- Python script to automatically create sigma rules from The hive observables☆25Mar 17, 2019Updated 7 years ago
- ☆13Feb 6, 2018Updated 8 years ago
- ATT&CK Remote Threat Hunting Incident Response☆203Dec 8, 2024Updated last year
- Library of blueprints usable in MISP Workflows☆14Jul 31, 2023Updated 3 years ago
- Threat hunting repo for my independent study on threat hunting with OSQuery☆27Jan 16, 2018Updated 8 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Powershell Threat Hunting Module☆292Sep 21, 2016Updated 10 years ago
- Configuration files for the SOF-ELK VM☆1,765Oct 26, 2026Updated last week
- This repository contains tools used by 401trg.☆21Apr 14, 2021Updated 5 years ago
- Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.☆946Dec 12, 2023Updated 2 years ago
- ☆37Dec 17, 2020Updated 5 years ago
- A collection of resources for Threat Hunters☆919Oct 29, 2026Updated last week
- Automated Real-Time Threat Hunting with ATD, Active Response and Elasticsearch/Kibana☆10Aug 17, 2018Updated 8 years ago
- Yara intergrated into BurpSuite☆48Jun 30, 2016Updated 10 years ago
- A Python library to help with some common threat hunting data analysis operations☆141Apr 23, 2023Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Parser for Windows Scheduled Task files.☆13Apr 26, 2023Updated 3 years ago
- Validates yara rules and tries to repair the broken ones.☆42Sep 5, 2020Updated 6 years ago
- Collection of walkthroughs on various threat hunting techniques☆78Aug 3, 2020Updated 6 years ago
- ☆53May 21, 2018Updated 8 years ago
- ☆81Jun 25, 2019Updated 7 years ago
- Experimental DNS logs pipeline based on Pi-hole dnsmasq logs, ELK stack, and Filebeat. Sample configs included.☆29Oct 26, 2023Updated 3 years ago
- Splunk App to assist Sysmon Threat Hunting☆37Mar 7, 2017Updated 9 years ago
- ☆21Apr 19, 2024Updated 2 years ago
- Track public endpoints and connections across AWS accounts using VPC Flow Logs☆11Jun 14, 2016Updated 10 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more e…☆4,709Jan 12, 2026Updated 9 months ago
- Lists of sources and utilities utilized to hunt, detect and prevent evildoers.☆172Dec 10, 2018Updated 7 years ago
- Ansible playbook to convert Sigma rules to ElastAlert rules☆10Feb 5, 2021Updated 5 years ago
- Exporting MISP event attributes to yara rules usable with Thor apt scanner☆25Mar 27, 2017Updated 9 years ago
- ☆133Mar 21, 2024Updated 2 years ago
- An informational repo about hunting for adversaries in your IT environment.☆1,900Nov 17, 2021Updated 4 years ago
- A Splunk app mapped to MITRE ATT&CK to guide your threat hunts☆1,190Jul 26, 2023Updated 3 years ago