Threat Alert Logic Repository
☆93Feb 7, 2019Updated 7 years ago
Alternatives and similar repositories for TALR
Users that are interested in TALR are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Matt's DFIR blog☆14Oct 7, 2026Updated 3 weeks ago
- ☆52Mar 4, 2019Updated 7 years ago
- Actionable analytics designed to combat threats☆1,008May 25, 2022Updated 4 years ago
- Firepit - STIX Columnar Storage☆18Jun 5, 2024Updated 2 years ago
- Import specific data sources into the Sigma generic and open signature format.☆78May 6, 2022Updated 4 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Converts Sigma detection rules to a Splunk alert configuration.☆116May 18, 2020Updated 6 years ago
- Open-source framework to detect outliers in Elasticsearch events☆204May 22, 2023Updated 3 years ago
- Elasticsearch/Kibana environment and log data for Sigma workshop☆27Dec 20, 2019Updated 6 years ago
- A Splunk App containing Sigma detection rules, which can be updated from a Git repository.☆109Feb 6, 2020Updated 6 years ago
- stix-icons is a collection of colourful and clean icons for use in software, training and marketing material to visualize cyber threats a…☆38Dec 15, 2022Updated 3 years ago
- A Splunk app mapped to MITRE ATT&CK to guide your threat hunts☆1,190Jul 26, 2023Updated 3 years ago
- STIX 2.1 Data Modeling Tool☆27Jul 2, 2024Updated 2 years ago
- Automatic detection engineering technical state compliance☆55Jul 7, 2024Updated 2 years ago
- Utilizing your Threat data from a MISP instance into CarbonBlack Response by exposing the data in the Threat Intelligence Feed.☆20May 25, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- The Project can be used to integrate QRadar with MISP Threat Sharing Platform☆40May 18, 2022Updated 4 years ago
- SIEGMA - Transform Sigma rules into SIEM consumables☆161Mar 10, 2025Updated last year
- Repository for my ATT&CK analysis research.☆70May 16, 2019Updated 7 years ago
- Python tool for converting from joy format to JA3 format SSL/TLS hashes☆11Jun 3, 2020Updated 6 years ago
- Blueteam operational triage registry hunting/forensic tool.☆147Sep 2, 2025Updated last year
- Oriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The…☆174Jun 10, 2021Updated 5 years ago
- Test Blue Team detections without running any attack.☆271May 2, 2024Updated 2 years ago
- Mitre Att&ck Technique Emulation☆82Mar 6, 2019Updated 7 years ago
- Detect Tactics, Techniques & Combat Threats☆2,355Oct 19, 2026Updated 2 weeks ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK☆1,078Nov 28, 2024Updated last year
- Cyber Analytics Platform and Examination System (CAPES) Project Page☆60Aug 3, 2019Updated 7 years ago
- DFIRTrack - The Incident Response Tracking Application☆540Jan 13, 2026Updated 9 months ago
- Integration between MISP platform and McAfee MVISION EDR☆14Mar 14, 2022Updated 4 years ago
- ☆13Feb 6, 2018Updated 8 years ago
- threat-intelligence.eu website and repository of information about open standards, documents, methodologies and processes in threat intel…☆50Apr 11, 2026Updated 6 months ago
- Mapping the MITRE ATT&CK Matrix with Osquery☆812May 11, 2023Updated 3 years ago
- A browser extension that seamlessly integrates your yara match notifications into VirusTotal Intelligence.☆17Feb 8, 2015Updated 11 years ago
- An informational repo about hunting for adversaries in your IT environment.☆1,899Nov 17, 2021Updated 4 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Scandiff is a PowerShell script to automate host discovery and scanning with nmap. After discovering and scanning hosts, scandiff perfor…☆19Oct 29, 2014Updated 12 years ago
- A Python library to help with some common threat hunting data analysis operations☆141Apr 23, 2023Updated 3 years ago
- Threat Report ATT&CK™ Mapping (TRAM) is a tool to aid analyst in mapping finished reports to ATT&CK.☆351Oct 6, 2021Updated 5 years ago
- Re-play Security Events☆1,839Mar 20, 2024Updated 2 years ago
- Splunk App to assist Sysmon Threat Hunting☆37Mar 7, 2017Updated 9 years ago
- An open source framework for enterprise level automated analysis.☆392Jun 27, 2022Updated 4 years ago
- This is a repository from Adam Swan and I's presentation on Windows Logs Zero 2 Hero.☆22Jan 30, 2018Updated 8 years ago