blookot / rsa2elkLinks
Converts Netwitness log parser configuration to Logstash configuration
☆20Updated 5 years ago
Alternatives and similar repositories for rsa2elk
Users that are interested in rsa2elk are comparing it to the libraries listed below
Sorting:
- This repository contains a few examples of actions that can be added to rules within Elastic Security.☆24Updated last year
- Threat Intelligence with Elastic - Minemeld integration with Elasticsearch☆19Updated 4 years ago
- Mapping Corelight or Zeek data to Elastic Common Schema fields☆34Updated 3 months ago
- A collection of Cortex Analyzers and Responders for TheHive/Cortex☆13Updated 6 years ago
- Corelight-Ansible-Roles are a collection of Ansible Roles and playbooks that install, configure, run and manage a variety of Corelight, S…☆16Updated 4 years ago
- ansible role to setup MISP, Malware Information Sharing Platform & Threat Sharing☆56Updated this week
- Parse wazuh[HIDS] alerts into ECS mapping using Filebeat☆28Updated 5 years ago
- Ansible playbook for installing MineMeld on Linux☆48Updated 4 years ago
- WebUI of MineMeld☆43Updated 2 years ago
- Read only mirror. To contribute or submit issues, please go to the website link --->☆15Updated 2 years ago
- Elastic TIP is a python tool which automates the process of aggregating Threat Intelligence and ingesting the intelligence into a common …☆28Updated last year
- ☆38Updated 6 years ago
- Downloading Splunk, made easy through scripts☆25Updated 2 months ago
- Translate an ECS mapping CSV to starter pipelines for Beats, Elasticsearch or Logstash☆54Updated 3 years ago
- Kestrel Jupyter Notebook Kernel☆10Updated 2 years ago
- Various Splunk Scripts and applets, all in one place☆33Updated last week
- A search command for Splunk which will allow you to search Elastic Search and display the results in the Splunk GUI☆70Updated 6 months ago
- Repo for Automations and other solutions for Elastic SIEM/Security.☆18Updated 4 years ago
- This TA takes Suricata5 data from your port mirrored Suricata server and makes it readable within Splunk. See Cheatsheets on how to setup…☆15Updated 5 years ago
- SIEM Logstash parsing for more than hundred technologies☆193Updated 3 weeks ago
- ☆18Updated 4 years ago
- Rapid cybersecurity toolkit based on Elastic in Docker. Designed to quickly build elastic-based environments to analyze and execute threa…☆18Updated 5 years ago
- This package allows the use of a custom Elastalert Alert which creates alerts with observables in TheHive using TheHive4Py.☆27Updated 4 years ago
- Postfix Add-on for Splunk (Compliant with the Mail CIM model)☆11Updated 4 years ago
- An Ansible playbook for deploying the Suricata intrusion detection system and fetching Snort rules with Oinkmaster.☆17Updated 4 years ago
- Workflows for Shuffle☆24Updated 3 years ago
- Splunk App for Linux Auditd☆57Updated 4 years ago
- MineMeld nodes for MISP☆19Updated 2 years ago
- Pre-configured environment that supports the development and running of OpenDXL solutions☆13Updated 4 years ago
- Wazuh - Splunk App☆56Updated last year