ReconInfoSec / graylog2thehive
Create alerts in The Hive from your Graylog alerts, to be turned into Hive cases.
☆44Updated 4 years ago
Related projects ⓘ
Alternatives and complementary repositories for graylog2thehive
- Repository for SPEED SIEM Use Case Framework☆52Updated 4 years ago
- A collection of hunting and blue team scripts. Mostly others, some my own.☆38Updated last year
- Recon Hunt Queries☆75Updated 3 years ago
- Provides detection capabilities and log conversion to evtx or syslog capabilities☆52Updated 2 years ago
- This repository was created to aid in the deployment/maintenance of the Sysmon service on a large number of computers.☆82Updated last year
- Expert Investigation Guides☆50Updated 3 years ago
- Defence Against the Dark Arts☆34Updated 5 years ago
- Microsoft GPO Readiness Lateral Movement Detection Tool☆16Updated last year
- CSIRT Jump Bag☆27Updated 6 months ago
- automate your MISP installs☆66Updated 4 years ago
- ☆34Updated 3 years ago
- RRR (Rapid Response Reporting) is a collection of Incident Response Report objects. They are designed to help incident responders provid…☆36Updated 2 years ago
- A tool to modify timestamps in a packet capture to a user selected date☆31Updated 3 years ago
- Incident Response Playbooks☆14Updated 5 years ago
- Collection of walkthroughs on various threat hunting techniques☆75Updated 4 years ago
- Run Velociraptor on Security Onion☆34Updated 2 years ago
- incident response scripts☆18Updated 5 years ago
- Acheron is a RESTful vulnerability assessment and management framework built around search and dedicated to terminal extensibility.☆31Updated last year
- SOC Workflow App helps Security Analysts and Threat Hunters explore suspicious events, look into raw events arriving at the Elastic Stack…☆92Updated 2 years ago
- Notes from my "Implementing a Kick-Butt Training Program: Blue Team GO!" talk☆12Updated 5 years ago
- Integrating Sysinternals Autoruns’ logs into Security Onion☆31Updated 9 months ago
- Sharing Threat Hunting runbooks☆24Updated 5 years ago
- ☆40Updated last year
- ☆77Updated 5 years ago
- A completely unsupported set of scripts used in SANS FOR572, Advanced Network Forensics and Analysis☆23Updated 4 months ago
- PowerShell - Endpoint Analysis Solution Your Windows Intranet Needs☆46Updated 10 months ago
- Incident Response Report Using GitHub-Sphinx☆19Updated 5 years ago
- Tool used to perform threat intelligence against packet data☆35Updated 7 months ago
- Threat Hunting with ELK Workshop (InfoSecWorld 2017)☆66Updated 7 years ago