benjaminjost / elastic-siemLinks
Elastic SIEM template for docker
☆18Updated 3 years ago
Alternatives and similar repositories for elastic-siem
Users that are interested in elastic-siem are comparing it to the libraries listed below
Sorting:
- 🚀 IRIS-SOAR: Modular SOAR (Security Orchestration, Automation, and Response) implementation in Python. Designed to complement DFIR-IRIS …☆10Updated last year
- A collection of scripts, tools. and configs for various OS'es and applications, all free and or open-source, to assist in impromptu Blue-…☆102Updated last year
- Security Onion + Automation + Response Lab including n8n and Velociraptor☆112Updated 2 years ago
- BLACK ESK SIEM is a SIEM platform built with Elasticsearch, Syslog-Ng and Kibana☆28Updated 2 years ago
- Sysmon and wazuh integration with Sigma sysmon rules [updated]☆68Updated 4 years ago
- Research repository tracking affected IPs from the Fortigate CVE-2022-40684 configuration leak by Belsen Group☆86Updated 7 months ago
- ☆53Updated 2 weeks ago
- Domain Response is a tool that is designed to help you automate the investigation for a domain. This tool is specificly designed to autom…☆49Updated last week
- Snapshot, patch, health-check, and potentially roll-back Windows VMs☆34Updated 7 years ago
- A Zeek Network Security Monitor tutorial that will cover the basics of creating a Zeek instance on your network in addition to all of the…☆63Updated 2 years ago
- ☆68Updated 4 years ago
- Integrate your Wazuh-Manager or Graylog with the SOCFortress Threat Intel Service☆29Updated 11 months ago
- Repo for Automations and other solutions for Elastic SIEM/Security.☆18Updated 4 years ago
- This Repository gives the best and possible strategies against hunting the ransomware☆26Updated 3 years ago
- BlueBox Malware analysis Box and Cyber threat intelligence.☆43Updated 3 years ago
- IOCPARSER.COM is a Fast and Reliable service that enables you to extract IOCs and intelligence from different data sources.☆35Updated 3 years ago
- Corelight@Home script☆43Updated last year
- CyberChef - Detection Engineering, TI, DFIR, Malware Analysis Edition☆65Updated 3 years ago
- ADDS (Active Directory Domain Services)☆28Updated 2 years ago
- Import CrowdStrike Threat Intelligence into your instance of MISP☆48Updated 2 months ago
- ELKFH - Elastic, Logstash, Kibana, Filebeat and Honeypot (HTTP, HTTPS, SSH, RDP, VNC, Redis, MySQL, MONGO, SMB, LDAP)☆46Updated 4 years ago
- Threat Simulator for Enterprise Networks☆14Updated 3 years ago
- Collection of Dashboards for Threat Hunting and more!☆68Updated 4 years ago
- This script enhances endpoint logging telemetry for the purpose of advanced malware threat detection or for building detections or malwar…☆33Updated 5 months ago
- A collection of various SIEM rules relating to malware family groups.☆69Updated last year
- ☆19Updated 3 years ago
- ☆37Updated 2 years ago
- Tool used to perform threat intelligence against packet data☆35Updated 7 months ago
- Some portable tools, some YARA, some Python, and a little bit of love. Not all of these tools can be used in incident response. Use PEs…☆39Updated 4 months ago
- Tool for quickly gathering information from Shodan.io about the number of IPs which satisfy large number of different queries☆49Updated 2 years ago