blookot / rsa2elk
Converts Netwitness log parser configuration to Logstash configuration
☆20Updated 4 years ago
Alternatives and similar repositories for rsa2elk:
Users that are interested in rsa2elk are comparing it to the libraries listed below
- Threat Intelligence with Elastic - Minemeld integration with Elasticsearch☆19Updated 3 years ago
- Parse wazuh[HIDS] alerts into ECS mapping using Filebeat☆27Updated 4 years ago
- Mapping Corelight or Zeek data to Elastic Common Schema fields☆34Updated 2 months ago
- Corelight-Ansible-Roles are a collection of Ansible Roles and playbooks that install, configure, run and manage a variety of Corelight, S…☆16Updated 3 years ago
- ansible role to setup MISP, Malware Information Sharing Platform & Threat Sharing☆53Updated 3 weeks ago
- WebUI of MineMeld☆43Updated 2 years ago
- MineMeld nodes for MISP☆19Updated last year
- ☆38Updated 5 years ago
- Repo for Automations and other solutions for Elastic SIEM/Security.☆18Updated 3 years ago
- Ansible playbook for installing MineMeld on Linux☆48Updated 4 years ago
- Translate an ECS mapping CSV to starter pipelines for Beats, Elasticsearch or Logstash☆54Updated 3 years ago
- This TA takes Suricata5 data from your port mirrored Suricata server and makes it readable within Splunk. See Cheatsheets on how to setup…☆15Updated 4 years ago
- Read only mirror. To contribute or submit issues, please go to the website link --->☆13Updated last year
- This repository contains a few examples of actions that can be added to rules within Elastic Security.☆22Updated 2 months ago
- A collection of Cortex Analyzers and Responders for TheHive/Cortex☆13Updated 5 years ago
- Scripts used to create ISO installers of ROCK for offline installation.☆10Updated 2 years ago
- setup zeek, previously Bro IDS☆18Updated 3 weeks ago
- PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform☆11Updated 10 months ago
- Wazuh - Splunk App☆53Updated 7 months ago
- Run zeek with zeekctl in docker☆51Updated 7 months ago
- Coding examples for the OpenDNS Investigate API☆24Updated 5 years ago
- Workflows for Shuffle☆21Updated 2 years ago
- Bro script package to create JSON formatted logs to stream into data analysis systems.☆28Updated last year
- Meraki MX Logstash configurations☆16Updated 2 years ago
- Custom Kibana dashboards to secure and monitor Microsoft 365.☆13Updated last year
- Expandable Defensive Cyber Operations Platform☆43Updated 2 years ago
- Elastic Beat for fetching and shipping Office 365 audit events☆67Updated 4 years ago
- ☆12Updated 4 years ago
- Integrate Zeek with Alienvault OTX☆25Updated 4 years ago
- Cisco eStreamer client☆24Updated 2 years ago