Truvis / Splunk_TA_Truvis_Suricata5
This TA takes Suricata5 data from your port mirrored Suricata server and makes it readable within Splunk. See Cheatsheets on how to setup a Suricata Port Mirrored Server
☆15Updated 4 years ago
Alternatives and similar repositories for Splunk_TA_Truvis_Suricata5:
Users that are interested in Splunk_TA_Truvis_Suricata5 are comparing it to the libraries listed below
- Collection of Dashboards for Threat Hunting and more!☆65Updated 4 years ago
- Threat Intelligence with Elastic - Minemeld integration with Elasticsearch☆19Updated 3 years ago
- MineMeld nodes for MISP☆19Updated last year
- ☆34Updated last year
- Incident Response Network Tools☆24Updated 3 years ago
- Powershell Scripts to work on Crowdstrike Falcon that pull back raw data relevant to forensic investigation☆22Updated 3 months ago
- Volatility plugins developed and maintained by the community☆21Updated 6 months ago
- The Project can be used to integrate QRadar with MISP Threat Sharing Platform☆39Updated 2 years ago
- Corelight@Home script☆40Updated last year
- Utilizing your Threat data from a MISP instance into CarbonBlack Response by exposing the data in the Threat Intelligence Feed.☆19Updated 2 years ago
- An Ansible playbook for deploying the Suricata intrusion detection system and fetching Snort rules with Oinkmaster.☆15Updated 3 years ago
- ☆29Updated 4 years ago
- Parse wazuh[HIDS] alerts into ECS mapping using Filebeat☆27Updated 4 years ago
- TheHiveIRPlaybook is a collection of TheHive case templates used for Incident Response☆13Updated 4 years ago
- Documentation used for Shuffle☆19Updated this week
- A collection of scripts useful in management of Splunk deployment☆20Updated 7 months ago
- Incident Response Playbooks☆14Updated 5 years ago
- ☆13Updated 2 months ago
- Downloading Splunk, made easy through scripts☆19Updated last month
- DNS Dashboard for hunting and identifying beaconing☆15Updated 4 years ago
- Azure Sentinel Template parser☆16Updated 4 years ago
- Snapshot, patch, health-check, and potentially roll-back Windows VMs☆34Updated 7 years ago
- A collection of Cortex Analyzers and Responders for TheHive/Cortex☆13Updated 5 years ago
- A repository of Sysmon For Linux configuration modules☆15Updated 3 years ago
- Provides detection capabilities and log conversion to evtx or syslog capabilities☆52Updated 2 years ago
- OSSEC Decoder & Rulesets for Sysmon Events☆15Updated 9 years ago
- A Sigma to Wazuh / OSSEC converter including a generated Windows Sysmon ruleset☆33Updated 4 years ago
- Indices for courses in SANS' Network Security Operations curriculum☆15Updated 9 years ago
- Incident Response Report Using GitHub-Sphinx☆20Updated 5 years ago
- Threat Detection & Anomaly Detection rules for popular open-source components☆51Updated 2 years ago