andrewbeard / broworkshop
Materials for the BSides NoVA/Charleston 2018 Bro Workshop
☆14Updated last year
Alternatives and similar repositories for broworkshop:
Users that are interested in broworkshop are comparing it to the libraries listed below
- first commit☆20Updated last year
- Threat hunting repo for my independent study on threat hunting with OSQuery☆28Updated 7 years ago
- Security Onion Elastic Stack☆46Updated 3 years ago
- A packer utility to create and capture DFIR Image for use AWS & Azure☆14Updated 5 years ago
- Web based analysis platform for use with the AWS_IR command line tool.☆17Updated 8 years ago
- Core incident handling plugins for aws_ir cli, incident pony, and more.☆21Updated 6 years ago
- Things to know when DFIR occurs near a vault deployment.☆43Updated 6 years ago
- Security Operations Center Multiple Purpose Tool, takes IP address input, conducts OSINT, conducts splunk, bro, fireeye, imperva, and fir…☆21Updated 7 years ago
- This project is no longer maintained. There's a successor at https://github.com/zeek-packages/zeek-agent-v2☆14Updated 4 years ago
- ☆12Updated 5 years ago
- Build Automated Machine Images for MISP☆28Updated last year
- Python module for evaluation of AWS account best practices around incident handling readieness.☆55Updated 4 years ago
- ☆29Updated 6 years ago
- TITO is a light framework for operationalizing threat intelligence that is platform and data agnostic.☆21Updated 4 years ago
- Acheron is a RESTful vulnerability assessment and management framework built around search and dedicated to terminal extensibility.☆32Updated 2 years ago
- Various Python scripts that have come in handy but aren't important enough to get their own repository☆22Updated 3 years ago
- Traceroute improved wrapper for CSIRT and CERT operators☆37Updated 3 months ago
- A few quick recipes for those that do not have much time during the day☆22Updated 2 months ago
- Proof of Concept Zappa Based AWS Persistence and Attack Platform☆37Updated 4 years ago
- Push-button Security Operations Center using Kubernetes☆12Updated 8 years ago
- Subscriptions to collect Windows Event Logs mapped to the MITRE ATT&CK model☆12Updated 4 years ago
- Site for IWS book content☆18Updated 6 years ago
- ☆8Updated 7 years ago
- Home to the ActorTrackr source code☆24Updated 7 years ago
- Finding Valuable Needles in Global Source Code Haystacks with Automation☆18Updated 3 years ago
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆16Updated 4 years ago