SkiTheSlicer / securityonion-airgap
Scripts to maintain Security Onion servers in an airgapped environment.
☆9Updated 8 years ago
Alternatives and similar repositories for securityonion-airgap
Users that are interested in securityonion-airgap are comparing it to the libraries listed below
Sorting:
- Harbinger Threat Intelligence☆82Updated 9 years ago
- Scripts for Bro IDS and ELK Stack☆57Updated 9 years ago
- Enrich a host with open source security information☆27Updated 9 years ago
- Cyber Defence Monitoring Course Suite :: Suricata, Bro, Moloch☆61Updated 8 years ago
- Import Bro logs from SecurityOnion into Logstash☆15Updated 9 years ago
- Repo for autosnort scripts.☆158Updated 4 years ago
- Simple block lists hub for PAN-OS DBL feature☆35Updated 6 years ago
- Compare multiple log formats against malware reputation lists.☆88Updated 7 years ago
- A collection of Bro scripts I've written☆40Updated 9 years ago
- Script for generating Bro intel files from pdf or html reports☆77Updated 9 years ago
- Ansible playbook to install Malware Information Sharing Platform (MISP)☆17Updated 10 years ago
- a Malware/Threat Analyst Desktop☆89Updated 9 years ago
- Parse URLCrazy and dnstwist output and compare against previous runs to identify new typosquatted domains.☆51Updated 9 years ago
- Cyber Analytics Platform and Examination System (CAPES) Project Page☆60Updated 5 years ago
- vagrant multi-machine: Moloch, Bro,Suricata,ElasticSearch,Kibana☆41Updated 10 years ago
- ☆141Updated 11 months ago
- ☆36Updated 8 years ago
- **BETA** A simple buildscript for network security monitoring on RHEL/CentOS☆31Updated 8 years ago
- Beholder is a shell script which installs and configures essentials to peer into your network activity.☆19Updated 7 years ago
- Basic Anomaly IDS capabilities with Python and Bro☆105Updated 7 years ago
- Transforms for the AlienVault OTX service☆39Updated 8 years ago
- This is a simple set of scripts that I used to generate network traffic. It's not perfect, but it's a starting point and it works.☆8Updated 8 years ago
- Push "BAD" IPs/Networks into QRadar's "Remote Networks", tag them properly, and use them!☆18Updated 11 years ago
- Dockerfiles for NSM tools☆84Updated 8 years ago
- cuckoo-1.1 fork with suricata/moloch/clamav and other goodies☆23Updated 10 years ago
- Utilities and scripts for bro-ids☆22Updated 11 years ago
- Python script to pull various IOCs from PDFs☆15Updated 10 years ago
- Modular tool to test exfiltration techniques.☆37Updated 8 years ago
- ☆49Updated 4 years ago
- ☆71Updated 3 years ago