blookot / elastic-releasesLinks
Listing releases of the Elastic stack with new features and references
☆19Updated 3 months ago
Alternatives and similar repositories for elastic-releases
Users that are interested in elastic-releases are comparing it to the libraries listed below
Sorting:
- Converts Netwitness log parser configuration to Logstash configuration☆20Updated 5 years ago
- Mapping Corelight or Zeek data to Elastic Common Schema fields☆34Updated 2 months ago
- This repository contains a few examples of actions that can be added to rules within Elastic Security.☆24Updated 11 months ago
- Sankey diagram for Kibana visualize.☆32Updated last year
- Translate an ECS mapping CSV to starter pipelines for Beats, Elasticsearch or Logstash☆54Updated 3 years ago
- OASIS TC Open Repository: Validator for STIX 2.0 JSON normative requirements and best practices☆60Updated last week
- Script to create MITRE ATT&CK Navigator layers from the annotated detection rules in Elastic Security (Kibana).☆20Updated 2 years ago
- ☆14Updated 4 months ago
- Using QRadar API☆20Updated 7 years ago
- ☆38Updated 2 months ago
- A Python library for handling TAXII Messages invoking TAXII Services.☆73Updated 4 years ago
- A Python implementation of the Community ID flow hashing standard☆24Updated 2 years ago
- Zeek support for Community ID flow hashing.☆37Updated 2 years ago
- Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert☆36Updated 3 years ago
- OASIS Cyber Threat Intelligence (CTI) TC Open Repository: Convert STIX 1.2 XML to STIX 2.x JSON☆52Updated last year
- Translate STIX 2 Patterning Queries☆31Updated 7 years ago
- List of sigma for a variety of threats for multiple log sources.☆13Updated 7 years ago
- Parse wazuh[HIDS] alerts into ECS mapping using Filebeat☆28Updated 5 years ago
- ☆15Updated 7 years ago
- OASIS TC Open Repository: TAXII 2 Client Library Written in Python☆120Updated last year
- Elastic Security Documentation☆91Updated 2 weeks ago
- Utilizing your Threat data from a MISP instance into CarbonBlack Response by exposing the data in the Threat Intelligence Feed.☆20Updated 3 years ago
- ☆38Updated last year
- A collection of Cortex Analyzers and Responders for TheHive/Cortex☆13Updated 6 years ago
- ☆15Updated last week
- The Project can be used to integrate QRadar with MISP Threat Sharing Platform☆40Updated 3 years ago
- OCA-wide documentation shared by all sub-projects and repositories☆33Updated last year
- TAXII client implementation from EclecticIQ☆104Updated 4 years ago
- MISP-STIX-Converter - Python library to handle the conversion between MISP and STIX formats☆56Updated 2 weeks ago
- ☆13Updated 3 years ago