apger / SA-RBALinks
Risk Based Alerting Supporting Add-On (SA) for Splunk
☆44Updated 4 years ago
Alternatives and similar repositories for SA-RBA
Users that are interested in SA-RBA are comparing it to the libraries listed below
Sorting:
- Data validator agains Splunk Common Information Model (CIM)☆78Updated last year
- ☆124Updated 4 years ago
- Splunk code (SPL) for serious threat hunters and detection engineers.☆289Updated 2 years ago
- Converts Sigma detection rules to a Splunk alert configuration.☆115Updated 5 years ago
- Phantom Apps Repo☆82Updated 4 years ago
- A Splunk app to use MISP in background☆113Updated 3 weeks ago
- Sunburst IOCs for Splunk Ingest☆18Updated 5 years ago
- ☆134Updated last year
- scripts to configure the Splunk Universal Forwarder in a locked down state☆40Updated 7 years ago
- Mark Baggett's (@MarkBaggett - GSE #15, SANS SEC573 Author) tool for detecting randomness using NLP techniques rather than pure entropy c…☆129Updated 3 years ago
- Carbon Black Feeds☆73Updated 2 years ago
- This was code for analyzing round 1 of the MITRE Enterprise ATT&CK Evaluation. Please check out https://github.com/joshzelonis/Enterprise…☆94Updated 5 years ago
- Pulls IOCs from MISP and adds the to reference sets in QRadar☆34Updated 2 years ago
- A Splunk App containing Sigma detection rules, which can be updated from a Git repository.☆111Updated 6 years ago
- A threat hunting / data analysis environment based on Python, Pandas, PySpark and Jupyter Notebook.☆252Updated 4 years ago
- ☆55Updated 3 years ago
- Splunk Content Control Tool☆126Updated last week
- Carbon Black API - Python language bindings☆145Updated last year
- Home for Splunk security datasets.☆128Updated 5 years ago
- A Splunk app with saved reports derived from Sigma rules☆73Updated 7 years ago
- TrackMe - Data tracking system for Splunk admins☆49Updated 3 years ago
- ☆225Updated 2 years ago
- Splunk Remote Work Insights - Executive Dashboard☆43Updated 5 years ago
- Security Monitoring Resolution Categories☆138Updated 4 years ago
- Scripted inputs designed to address common use-cases in forwarder misconfigurations in a Splunk deployment☆35Updated last year
- ☆99Updated 3 years ago
- Sigma Detection Rule Repository☆92Updated 5 years ago
- MITRE ATT&CK Framework compliance dashboard and correlation searches that works with Splunk Enterprise Security and ES Content Update☆30Updated 2 months ago
- Tool to extract indicators of compromise from security reports in PDF format☆75Updated last year
- Python API Client for TheHive☆234Updated 2 months ago