TheHive-Project / Cortex
Cortex: a Powerful Observable Analysis and Active Response Engine
☆1,408Updated 5 months ago
Alternatives and similar repositories for Cortex:
Users that are interested in Cortex are comparing it to the libraries listed below
- TheHive: a Scalable, Open Source and Free Security Incident Response Platform☆3,629Updated 2 years ago
- Your Everyday Threat Intelligence☆1,844Updated this week
- Cortex Analyzers Repository☆455Updated last week
- An informational repo about hunting for adversaries in your IT environment.☆1,767Updated 3 years ago
- Create actionable data from your Vulnerability Scans☆1,379Updated 2 years ago
- Open Source Security Events Metadata (OSSEM)☆1,261Updated 2 years ago
- Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis…☆2,509Updated 9 months ago
- Configuration files for the SOF-ELK VM☆1,577Updated 3 weeks ago
- Detect Tactics, Techniques & Combat Threats☆2,145Updated 2 months ago
- Documentation of TheHive☆396Updated last year
- A curated Cyber "Security Orchestration, Automation and Response (SOAR)" awesome list.☆857Updated 7 months ago
- Re-play Security Events☆1,637Updated last year
- Extract and aggregate threat intelligence.☆859Updated last year
- A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more e…☆4,186Updated last year
- Actionable analytics designed to combat threats☆982Updated 2 years ago
- Web app that provides basic navigation and annotation of ATT&CK matrices☆2,113Updated 2 weeks ago
- A Splunk app mapped to MITRE ATT&CK to guide your threat hunts☆1,151Updated last year
- Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…☆2,099Updated 3 weeks ago
- Cyber Analytics Repository☆934Updated last year
- Digging Deeper....☆3,204Updated this week
- A utility to safely generate malicious network traffic patterns and evaluate controls.☆1,303Updated last year
- Collaborative Incident Response platform☆1,180Updated last week
- A collection of resources for Threat Hunters☆881Updated 6 months ago
- IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.☆1,032Updated last week
- Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders☆901Updated last year
- A Powershell incident response framework☆1,598Updated 2 years ago
- Fast Incident Response☆1,863Updated last week
- Cyber Threat Intelligence Repository expressed in STIX 2.0☆1,840Updated this week
- Real-time, container-based file scanning at enterprise scale☆920Updated last week
- Documentation of Cortex☆174Updated last year