Security-Experts-Community / ERMACKLinks
Enterprise Response Model & Common Knowledge
☆39Updated 7 months ago
Alternatives and similar repositories for ERMACK
Users that are interested in ERMACK are comparing it to the libraries listed below
Sorting:
- реп полезностей для PT MaxPatrol SIEM☆24Updated 2 years ago
- Chrome extension for SOC automations☆38Updated 4 months ago
- A free data collection and YARA scanning tool for cybersecurity incident investigation, compromise assessment and threat hunting☆20Updated last year
- Открытый репозиторий с правилами на языке eXtraction and Processing (XP)☆28Updated 4 months ago
- MP SIEM SDK☆31Updated last month
- ☆69Updated 4 years ago
- Rapidly Search and Hunt through Linux Forensics Artifacts☆201Updated 2 years ago
- Forensic Artifact Collection Tool Matrix☆92Updated last year
- Pointing cybersecurity teams to thousands of detection rules and offensive security tests aligned with common attacker techniques☆142Updated last year
- A repository with data about APTs☆13Updated 3 years ago
- MAD ATT&CK Defender: ATT&CK Adversary Emulation Repository☆127Updated 2 years ago
- Blue Team detection lab created with Terraform and Ansible in Azure.☆176Updated last year
- This project is a SIEM with SIRP and Threat Intel, all in one.☆460Updated last year
- Incident Response collection and processing scripts with automated reporting scripts☆319Updated last year
- Resources To Learn And Understand SIGMA Rules☆182Updated 2 years ago
- an excel-centric approach for the MITRE ATT&CK® Tactics and Techniques☆189Updated 3 years ago
- ☆65Updated 4 months ago
- Open Source Platform for storing, organizing, and searching documents related to cyber threats☆169Updated 2 years ago
- A repository of my own Sigma detection rules.☆163Updated 2 months ago
- Extensible framework for analyzing publicly available information about vulnerabilities☆127Updated last month
- ☆78Updated 4 months ago
- MISP Playbooks☆222Updated 3 months ago
- An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.☆342Updated 2 months ago
- A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.☆97Updated 2 years ago
- A Python package is used to execute Atomic Red Team tests (Atomics) across multiple operating system environments.☆137Updated last year
- Implementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.☆207Updated 3 years ago
- System of Orchestration, Lifecycle control, Detection and Response☆60Updated 2 years ago
- Sigma rule specification☆170Updated last month
- Rules generated from our investigations.☆203Updated 7 months ago
- CarbonBlack EDR detection rules and response actions☆73Updated last year