Alternatives and similar repositories for NotifySecurity

Users that are interested in NotifySecurity are comparing it to the libraries listed below

• bromiley / olaf
  Office365 Log Analysis Framework
  ☆82Updated 5 years ago
• JoeyRentenaar / Office-365-Extractor
  The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL)
  ☆159Updated 2 years ago
• MalwareArchaeology / ARTHIR
  ATT&CK Remote Threat Hunting Incident Response
  ☆200Updated 5 months ago
• sensepost / notruler
  The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.
  ☆94Updated 7 years ago
• MHaggis / hunt-detect-prevent
  Lists of sources and utilities utilized to hunt, detect and prevent evildoers.
  ☆165Updated 6 years ago
• mgreen27 / Invoke-LiveResponse
  Invoke-LiveResponse
  ☆147Updated 3 years ago
• OTRF / Set-AuditRule
  Useful access control entries (ACE) on system access control list (SACL) of securable objects to find potential adversarial activity
  ☆90Updated 3 years ago
• jokezone / Update-Sysmon
  This repository was created to aid in the deployment/maintenance of the Sysmon service on a large number of computers.
  ☆82Updated 2 years ago
• MHaggis / CBR-Queries
  Collection of useful, up to date, Carbon Black Response Queries
  ☆83Updated 4 years ago
• cottinghamd / HardeningAuditor
  Scripts for comparing Microsoft Windows compliance with the ASD 1709 & Office 2016 Hardening Guides
  ☆159Updated 5 years ago
• certsocietegenerale / yeti
  Your Everyday Threat Intelligence
  ☆22Updated 8 years ago
• d3sre / Use_Case_Applicability
  Security Monitoring Resolution Categories
  ☆138Updated 3 years ago
• ANSSI-FR / AD-permissions
  Active Directory permissions (ACL/ACE) auditing tools
  ☆148Updated 7 years ago
• olafhartong / Presentations
  My conference presentations
  ☆66Updated last year
• P4T12ICK / Sigma2SplunkAlert
  Converts Sigma detection rules to a Splunk alert configuration.
  ☆111Updated 5 years ago
• MarkBaggett / ese-analyst
  This is a set of tools for doing forensics analysis on Microsoft ESE databases.
  ☆124Updated 3 years ago
• Infocyte / PSHunt
  Powershell Threat Hunting Module
  ☆283Updated 8 years ago
• nov3mb3r / trident
  A PowerShell incident response script for quick triage
  ☆80Updated 2 years ago
• giMini / NOAH
  PowerShell No Agent Hunting
  ☆110Updated 7 years ago
• da667 / AutoMISP
  automate your MISP installs
  ☆68Updated 4 years ago
• cudeso / misp-tip-of-the-week
  A collection of tips for using MISP.
  ☆74Updated 5 months ago
• ANSSI-FR / DFIR-O365RC
  PowerShell module for Office 365 and Azure log collection
  ☆266Updated 2 months ago
• dstaulcu / TA-Sigma-Searches
  A Splunk app with saved reports derived from Sigma rules
  ☆73Updated 7 years ago
• 0xThiebaut / sigmai
  Import specific data sources into the Sigma generic and open signature format.
  ☆78Updated 3 years ago
• remg427 / misp42splunk
  A Splunk app to use MISP in background
  ☆110Updated 2 months ago
• olafhartong / TA-Sysmon-deploy
  Deploy and maintain Symon through the Splunk Deployment Sever
  ☆31Updated 4 years ago
• SecurityRiskAdvisors / TALR
  Threat Alert Logic Repository
  ☆92Updated 6 years ago
• s0lari / Hornets-Nest
  Purple Team Security
  ☆75Updated 3 years ago
• sfakiana / SANS-CTI-Summit-2021
  Resources for SANS CTI Summit 2021 presentation
  ☆102Updated last year
• marcurdy / dfir-toolset
  Dump of organized knowledge on DFIR
  ☆134Updated 3 years ago