Stage2Sec / sigmalint
A simple linter for Sigma rules
☆13Updated 4 years ago
Related projects ⓘ
Alternatives and complementary repositories for sigmalint
- A Splunk app to use MISP in background☆109Updated 3 weeks ago
- JSON schemas for validating CACAO Security Playbooks. Note: In December 2023, Cyentific AS offered and transferred the content of this re…☆18Updated 11 months ago
- MISP-STIX-Converter - Python library to handle the conversion between MISP and STIX formats☆50Updated this week
- ☆87Updated 2 years ago
- Sigma Detection Rule Repository☆85Updated 4 years ago
- ☆41Updated 3 years ago
- Pulls IOCs from MISP and adds the to reference sets in QRadar☆33Updated last year
- ☆31Updated last month
- Tool to extract indicators of compromise from security reports in PDF format☆72Updated 5 months ago
- This is a repository of vendor-agnostic workflows provided for those interested in deploying Security Orchestration, Automation, and Resp…☆74Updated 3 years ago
- This directory features proven systems that demonstrate value to your threat-informed efforts using metrics.☆97Updated this week
- Collection of useful, up to date, Carbon Black Response Queries☆83Updated 4 years ago
- Carbon Black Feeds☆70Updated last year
- stix-icons is a collection of colourful and clean icons for use in software, training and marketing material to visualize cyber threats a…☆32Updated last year
- Feed Generator for MISP☆19Updated 2 years ago
- Import specific data sources into the Sigma generic and open signature format.☆77Updated 2 years ago
- Scripts to facilitate filtering with Plaso☆125Updated 4 years ago
- Analyze binaries collected in VMware Carbon Black EDR against Yara rules.☆36Updated last year
- ☆1Updated 3 weeks ago
- An open source platform to support analysts to organise their case and tasks☆55Updated this week
- 2021 SANS DFIR Summit: Greppin' Logs☆21Updated 3 years ago
- InvestigationPlaybookSpec☆72Updated 7 years ago
- Recon Hunt Queries☆75Updated 3 years ago
- Repository of public reference frameworks for the DFIR community.☆109Updated last year
- Converts Sigma detection rules to a Splunk alert configuration.☆107Updated 4 years ago
- This repository hosts files relating to the TF-CSIRT Reference Security Incident Taxonomy Working Group.☆64Updated last month
- Resources for SANS CTI Summit 2021 presentation☆102Updated last year
- A community event for security researchers to share their favorite notebooks☆106Updated 9 months ago
- Scripts for TheHive.☆22Updated 5 years ago