alertflex / altprobeLinks
collector/runner
☆65Updated 3 months ago
Alternatives and similar repositories for altprobe
Users that are interested in altprobe are comparing it to the libraries listed below
Sorting:
- Bro integration with osquery☆15Updated 2 years ago
- ☆53Updated 6 years ago
- How to Zeek Sysmon Logs!☆102Updated 3 years ago
- S2AN - Mapper of Sigma/Suricata Rules/Signatures ➡️ MITRE ATT&CK Navigator☆87Updated 2 years ago
- ☆20Updated 5 years ago
- A tool to assess data quality, built on top of the awesome OSSEM.☆78Updated 2 years ago
- ATT&CK Evaluations website (DEPRECATED)☆59Updated 4 years ago
- A Yara Lua output script for Suricata☆20Updated 6 years ago
- Centralize Management of Intrusion Detection System like Suricata Bro Ossec ...☆72Updated 6 years ago
- Malware Sinkhole List in various formats☆103Updated 3 years ago
- Linux Incident Response☆90Updated 5 years ago
- The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX accou…☆111Updated last year
- ☆82Updated 4 years ago
- Old home of LimaCharlie, open source EDR☆31Updated last year
- Remote Desktop Client Fingerprint script for Zeek. Based off of https://github.com/0x4D31/fatt☆40Updated 2 years ago
- Threat Mapping Catalogue☆17Updated 3 years ago
- The new name is DeTT&CT☆24Updated 6 years ago
- Simulating Adversary Operations☆93Updated 7 years ago
- Security Onion Elastic Stack☆46Updated 4 years ago
- ☆41Updated 2 years ago
- THOR MITRE ATT&CK Framework Coverage☆24Updated 5 years ago
- A CALDERA plugin for ATT&CK Evaluations Round 1☆33Updated last year
- Repository for my ATT&CK analysis research.☆69Updated 6 years ago
- Joystick is a tool that gives you the ability to transform the ATT&CK Evaluations data into concise views that brings forward the nuances…☆64Updated last year
- PcapMonkey will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.☆155Updated 3 months ago
- Public rules and samples for various automations through LimaCharlie.io☆13Updated 3 years ago
- A MITRE Caldera plugin written in Python 3 used to convert Red Canary Atomic Red Team Tests to MITRE Caldera Stockpile YAML ability files…☆72Updated 3 years ago
- The Fastest way to consume Threat Intel☆26Updated 3 years ago
- Simple High Interaction Honeypot Solution for SMB protocol☆49Updated 4 years ago
- ☆77Updated 4 years ago