Truvis / Splunk_TA_Truvis_Suricata5
This TA takes Suricata5 data from your port mirrored Suricata server and makes it readable within Splunk. See Cheatsheets on how to setup a Suricata Port Mirrored Server
☆15Updated 4 years ago
Alternatives and similar repositories for Splunk_TA_Truvis_Suricata5:
Users that are interested in Splunk_TA_Truvis_Suricata5 are comparing it to the libraries listed below
- Collection of Dashboards for Threat Hunting and more!☆67Updated 4 years ago
- A collection of scripts useful in management of Splunk deployment☆20Updated 7 months ago
- ☆34Updated last year
- incident response scripts☆19Updated 6 years ago
- Snapshot, patch, health-check, and potentially roll-back Windows VMs☆34Updated 7 years ago
- The Project can be used to integrate QRadar with MISP Threat Sharing Platform☆39Updated 2 years ago
- Integrate Zeek with Alienvault OTX☆25Updated 4 years ago
- Downloading Splunk, made easy through scripts☆19Updated last month
- MISP to Splunk Enterprise Security Theat Intelligence Framework Integration☆12Updated last year
- ☆13Updated 3 months ago
- A collection of Cortex Analyzers and Responders for TheHive/Cortex☆13Updated 5 years ago
- Incident Response Network Tools☆24Updated 3 years ago
- scripts to configure the Splunk Universal Forwarder in a locked down state☆40Updated 6 years ago
- Incident Response Report Using GitHub-Sphinx☆20Updated 5 years ago
- Repository for SPEED SIEM Use Case Framework☆53Updated 4 years ago
- OSSEC Decoder & Rulesets for Sysmon Events☆15Updated 9 years ago
- Actionable analytics designed to combat threats based on MITRE's ATT&CK.☆22Updated 5 years ago
- Recon Hunt Queries☆76Updated 3 years ago
- Osquery Packs we use for customer security hardening☆12Updated 6 months ago
- ☆41Updated 2 years ago
- A script to create and assign SOP tasks into the cases☆19Updated 4 years ago
- Threat Intelligence with Elastic - Minemeld integration with Elasticsearch☆19Updated 3 years ago
- This repo represents work the Phantom Community collaborates on to build apps and learn.☆12Updated 3 years ago
- ☆16Updated 4 years ago
- MineMeld nodes for MISP☆19Updated last year
- Deploy and maintain Symon through the Splunk Deployment Sever☆31Updated 4 years ago
- Utilizing your Threat data from a MISP instance into CarbonBlack Response by exposing the data in the Threat Intelligence Feed.☆19Updated 2 years ago
- Various Splunk Scripts and applets, all in one place☆32Updated this week
- DNS Dashboard for hunting and identifying beaconing☆15Updated 4 years ago
- A few quick recipes for those that do not have much time during the day☆22Updated 5 months ago