Converts Netwitness log parser configuration to Logstash configuration
☆20Sep 10, 2020Updated 6 years ago
Alternatives and similar repositories for rsa2elk
Users that are interested in rsa2elk are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Web UI for testing Elastic Beats processors☆19Updated this week
- DGA detection project that aims to rapidly build and deploy a machine learning system to detect domain names generated by malware.☆19Jan 29, 2019Updated 7 years ago
- Mapping Corelight or Zeek data to Elastic Common Schema fields☆35Oct 1, 2026Updated 2 weeks ago
- Elastic TIP is a python tool which automates the process of aggregating Threat Intelligence and ingesting the intelligence into a common …☆27Jul 30, 2024Updated 2 years ago
- Synapse: a Meta Alert Feeder for TheHive, a Security Incident Response Platform☆73Jul 28, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- TheHiveIRPlaybook is a collection of TheHive case templates used for Incident Response☆13Jul 13, 2020Updated 6 years ago
- Translate an ECS mapping CSV to starter pipelines for Beats, Elasticsearch or Logstash☆54Mar 9, 2022Updated 4 years ago
- SIEM Logstash parsing for more than hundred technologies☆198Updated this week
- A few quick recipes for those that do not have much time during the day☆22Oct 28, 2024Updated last year
- ☆12Apr 22, 2022Updated 4 years ago
- Listing releases of the Elastic stack with new features and references☆19Aug 5, 2026Updated 2 months ago
- Filebeat module for Squid access.log + Kibana dashboards. ELK 7.x☆17Sep 19, 2020Updated 6 years ago
- A script to create and assign SOP tasks into the cases☆20Aug 16, 2020Updated 6 years ago
- MasterParser is a simple, all-in-one, digital forensics artifact parser☆24Jul 9, 2021Updated 5 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆16Jan 6, 2021Updated 5 years ago
- Super light, super fast, unlimited search idea☆26Aug 3, 2025Updated last year
- An deep learning based lightweight TCN for log anomaly detection.☆40Oct 29, 2021Updated 4 years ago
- Flexmonster Pivot Table & Charts plugin for Kibana☆64Jun 20, 2023Updated 3 years ago
- WebUI of MineMeld☆42Mar 16, 2023Updated 3 years ago
- Web-based sensor management suite☆21Mar 2, 2023Updated 3 years ago
- Repo with supporting material for the talk titled "Cracking the Beacon: Automating the extraction of implant configurations"☆11Feb 6, 2025Updated last year
- Ingest Nessus files into Elasticsearch using PowerShell!☆21Apr 26, 2024Updated 2 years ago
- Ansible playbook for installing MineMeld on Linux☆47Mar 18, 2021Updated 5 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- 🎺☆13Nov 10, 2025Updated 11 months ago
- ansible role to setup MISP, Malware Information Sharing Platform & Threat Sharing☆59Oct 10, 2026Updated last week
- Threat Intelligence with Elastic - Minemeld integration with Elasticsearch☆19May 11, 2021Updated 5 years ago
- Dockerfile and artifacts for running a self-contained HDP 2.3 "cluster" in a docker container☆10Aug 30, 2016Updated 10 years ago
- The "DFUR" Splunk application and data that was presented at the 2020 SANS DFIR Summit.☆13Sep 9, 2020Updated 6 years ago
- The "Let's-defend-solution" directory contains the answers to all paths of the Let's Defend platform that were saved by the creator 8 mon…☆14Aug 11, 2026Updated 2 months ago
- Digital Forensics and Incident Response notes and Autopsy tool walkthrough☆11Feb 3, 2022Updated 4 years ago
- Matt's DFIR blog☆14Oct 7, 2026Updated last week
- Updated Malware Crawler to populate repositories☆10Jul 6, 2015Updated 11 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Define pytest fixtures with lambda functions☆16Jan 13, 2025Updated last year
- ☆13Jun 13, 2024Updated 2 years ago
- Construct triage artifact based on rules☆17Updated this week
- Osquery Packs we use for customer security hardening☆12Jun 30, 2025Updated last year
- A rust library for connecting devices to Microsoft Azure IoT Hub☆18Sep 23, 2025Updated last year
- Swipe Right On A New Peering Relationship☆15Jun 21, 2020Updated 6 years ago
- Active Response plugin. Osquery to execute wazuh/ossec active response plugins. You can write your own plugins, easy to plug☆13Jun 20, 2020Updated 6 years ago