cisagov / playbook-ngLinks
Playbook-NG is a stateless web-based application used to match incident findings with countermeasures for adversary containment and eviction.
☆138Updated last month
Alternatives and similar repositories for playbook-ng
Users that are interested in playbook-ng are comparing it to the libraries listed below
Sorting:
- AI-powered cybersecurity attack flow visualization tool using MITRE ATT&CK☆67Updated 2 weeks ago
- LotL RMM☆240Updated last week
- Mapping of open-source detection rules and atomic tests.☆176Updated 8 months ago
- An index of publicly available and open-source threat detection rulesets.☆124Updated 5 months ago
- Finding ClickFix and FakeCAPTCHA like it's 1999☆58Updated this week
- ☆146Updated last week
- Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.☆147Updated last week
- A preconfigured Velociraptor triage collector☆55Updated this week
- ☆116Updated 3 months ago
- A repository to help CTI teams tackle the challenges around collection and research by providing guidance from experienced practitioners☆106Updated 10 months ago
- ☆94Updated last month
- ☆101Updated 2 months ago
- Convert a variety of log formats to CSV while enriching detected IPs with Geolocation, ASN, DNS, WhoIs, Shodan InternetDB and Threat Indi…☆109Updated 11 months ago
- Repository documenting how Threat Intelligence and / or a Threat Intelligence Platform can prove its value to an organisation.☆52Updated 10 months ago
- Knowledge base on cybercriminal concealment techniques☆76Updated 4 months ago
- A collection of various SIEM rules relating to malware family groups.☆69Updated last year
- Save toil in security operations with: Detection & Intelligence Analysis for New Alerts (D.I.A.N.A. )☆190Updated last year
- Anvilogic Forge☆107Updated 3 weeks ago
- Cybether - A modern, open-source Cybersecurity Governance, Risk, and Compliance (GRC) dashboard☆81Updated 2 weeks ago
- M365/Azure adversary simulation tool that generates realistic attack telemetry to help blue teams improve their detection and response ca…☆309Updated last month
- God Mode Detection Rules☆134Updated last year
- ASR Configurator, Essentials and Atomic Testing☆91Updated 5 months ago
- Generate a matrix based on an inventory of InfoSec tools☆23Updated last year
- Convert Sigma rules to SIEM queries, directly in your browser.☆95Updated this week
- VirtualGHOST Detection Tool☆92Updated last year
- The Eventlog Compendium is the go-to resource for understanding Windows Event Logs.☆48Updated 4 months ago
- Collection of Remote Management Monitoring tool artifacts, for assisting forensics and investigations☆95Updated last month
- A list of RMMs designed to be used in automation to build alerts☆112Updated 5 months ago
- ☆69Updated last week
- Online resources related to Detection Engineering. Detection rules, detection logic, attack samples, detection tests and emulation tools…☆117Updated 2 weeks ago