aw-mfe / gsuite2mfe
Send events from G Suite to McAfee SIEM
☆13Updated 5 years ago
Alternatives and similar repositories for gsuite2mfe:
Users that are interested in gsuite2mfe are comparing it to the libraries listed below
- Core incident handling plugins for aws_ir cli, incident pony, and more.☆21Updated 6 years ago
- Python module for evaluation of AWS account best practices around incident handling readieness.☆55Updated 4 years ago
- Integration for Jira ticket creation from Tenable vulnerability scans☆17Updated 5 years ago
- Manage Splunk Agents and Servers☆16Updated 5 years ago
- A Lambda-powered Security Orchestration framework for AWS GuardDuty☆51Updated 5 years ago
- Ansible playbook for installing MineMeld on Linux☆48Updated 3 years ago
- ☆33Updated 6 years ago
- Scripts and integrations for OSSEC☆39Updated 8 years ago
- Scripts for Qualys Cloud Security offerings☆14Updated 4 years ago
- This script is used to generate some basic detections of the aws security services☆71Updated 2 years ago
- Send your nessus compliance and vulnerability scan data to ElasticSearch☆27Updated 6 years ago
- ☆55Updated 2 years ago
- Role for Installing/Configuring Nessus Agent☆21Updated 6 years ago
- ansible role to setup MISP, Malware Information Sharing Platform & Threat Sharing☆53Updated last month
- This command line tool counts the number of resources in different categories across Amazon regions.☆56Updated 5 years ago
- Actionable analytics designed to combat threats based on MITRE's ATT&CK.☆22Updated 5 years ago
- A python module for orchestrating content acquisitions and analysis via amazon ssm.☆58Updated last year
- Traceroute improved wrapper for CSIRT and CERT operators☆37Updated 3 months ago
- Automation of VPC Traffic Mirror Sessions in AWS☆35Updated 3 months ago
- A python script to shift the timestamp on syslog data. Useful for forensicators combating time skew.☆20Updated 2 years ago
- Simple Docker-based quickstart for osquery, Fleet, and ELK stack☆62Updated last year
- Tenable.io SDK offers a scalable and safe way to integrate with the Tenable.io platform.☆83Updated 4 years ago
- ☆27Updated 11 years ago
- Apps for Splunk Phantom security automation | Cisco Meraki | Ansible Tower | F5 | A10☆25Updated 4 years ago
- notes on configuring aws organizations☆11Updated 8 years ago
- Web based analysis platform for use with the AWS_IR command line tool.☆17Updated 8 years ago
- Dockerfiles for containerized osquery☆13Updated 7 years ago
- ☆140Updated 8 months ago
- scripts to configure the Splunk Universal Forwarder in a locked down state☆40Updated 6 years ago
- Tools for AWS forensics☆64Updated 8 years ago