acquiredsecurity / Sentinel-One-STAR-Rules-Threat-Hunts
SentinelOne STAR Rules
☆52Updated last year
Alternatives and similar repositories for Sentinel-One-STAR-Rules-Threat-Hunts:
Users that are interested in Sentinel-One-STAR-Rules-Threat-Hunts are comparing it to the libraries listed below
- Repository of SentinelOne Deep Visibility queries.☆120Updated 3 years ago
- MITRE ATT&CK mapped queries for SentinelOne Deep Visiblity☆87Updated 4 years ago
- ☆53Updated last year
- MISP to Sentinel integration☆62Updated last month
- A repository to share publicly available Velociraptor detection content☆124Updated this week
- Project based on RegRipper, to extract add'l value/pivot points from TLN events file☆82Updated 2 months ago
- A browser extension for threat hunting that provides one UI for different SIEMs/EDRs and simplifies investigation☆75Updated 7 months ago
- A collection of various SIEM rules relating to malware family groups.☆64Updated 7 months ago
- Provides an advanced input.conf file for Windows and 3rd party related software with more than 70 different event log mapped to the MITRE…☆90Updated 3 months ago
- A repository of my own Sigma detection rules.☆156Updated 4 months ago
- An opensource sigma conversion tool built using pysigma☆112Updated 3 weeks ago
- ☆79Updated 2 months ago
- Notes on responding to security breaches relating to Azure AD☆97Updated 2 years ago
- Repository of attack and defensive information for Business Email Compromise investigations☆237Updated last month
- A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters …☆170Updated this week
- Hunting Queries for Defender ATP☆77Updated 2 months ago
- A dataset containing Office 365 Unified Audit Logs for security research and detection☆48Updated 2 years ago
- ☆70Updated 2 months ago
- ☆4Updated 2 months ago
- Scripts for rapid Windows endpoint "tactical triage" and investigations with Velociraptor and KAPE☆108Updated this week
- This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.☆101Updated last year
- A list of Splunk queries that I've collected and used over time.☆74Updated 4 years ago
- User Feedback Space of #MitreAssistant☆37Updated last year
- Cyber Defence related kusto queries for use in Azure Sentinel and Defender advanced hunting☆60Updated last week
- Repository where I hold random detection and threat hunting queries that I come up with based on different sources of information (or eve…☆70Updated this week
- Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise☆59Updated 8 months ago
- Harness the power of Splunk for your investigations☆83Updated last month
- Config files for my GitHub profile.☆14Updated last year
- Collection of scripts/resources/ideas for attack surface reduction and additional logging to enable better threat hunting on Windows endp…☆38Updated 9 months ago
- Full of public notes and Utilities☆94Updated last month