Alternatives and similar repositories for shareable-soar-workflows

Users that are interested in shareable-soar-workflows are comparing it to the libraries listed below

• siriussecurity / dettectinator
  Dettectinator - The Python library to your DeTT&CT YAML files.
  ☆116Updated 4 months ago
• center-for-threat-informed-defense / sensor-mappings-to-attack
  Sensor Mappings to ATT&CK is a collection of resources to assist cyber defenders with understanding which sensors and events can help det…
  ☆50Updated 2 months ago
• redcanaryco / surveyor
  A cross-platform baselining, threat hunting, and attack surface analysis tool for security teams.
  ☆227Updated 4 months ago
• k-bailey / detection-engineering-maturity-matrix
  ☆96Updated 2 years ago
• 3CORESec / SIEGMA
  SIEGMA - Transform Sigma rules into SIEM consumables
  ☆154Updated 5 months ago
• cisagov / ACID
  ☆72Updated 4 months ago
• COSSAS / SOARCA
  SOARCA - The Open Source CACAO-based Security Orchestrator!
  ☆76Updated last week
• center-for-threat-informed-defense / insider-threat-ttp-kb
  The principal objective of this project is to develop a knowledge base of the tactics, techniques, and procedures (TTPs) used by insiders…
  ☆143Updated last month
• OTRF / infosec-jupyter-book
  The Infosec Community Definitive Guide to Jupyter Notebooks
  ☆125Updated 4 years ago
• opencybersecurityalliance / stix-shifter
  This project consists of an open source library allowing software to connect to data repositories using STIX Patterning, and return resul…
  ☆248Updated last week
• Shuffle / openapi-apps
  Swagger/ OpenAPI specifications for security products and services
  ☆78Updated 2 weeks ago
• tuckner / automation-capability-matrix
  A tool that allows you to document and assess any security automation in your SOC
  ☆46Updated 9 months ago
• gertjanbruggink / metrics
  This directory features proven systems that demonstrate value to your threat-informed efforts using metrics.
  ☆113Updated 9 months ago
• center-for-threat-informed-defense / summiting-the-pyramid
  Summiting the Pyramid is a research project focused on engineering cyber analytics to make adversary evasion more difficult. The research…
  ☆47Updated 3 months ago
• splunk / contentctl
  Splunk Content Control Tool
  ☆116Updated last week
• opencybersecurityalliance / cacao-roaster
  A web application for generating, parsing and validating, manipulating, visualizing and executing CACAO v2.0 playbooks.
  ☆34Updated 4 months ago
• OTRF / OSSEM-DM
  OSSEM Detection Model
  ☆177Updated 2 years ago
• MISP / misp-stix
  MISP-STIX-Converter - Python library to handle the conversion between MISP and STIX formats
  ☆55Updated this week
• fr0gger / jupyter-collection
  Collection of Jupyter Notebooks by @fr0gger_
  ☆175Updated 2 months ago
• center-for-threat-informed-defense / cti-blueprints
  CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable repor…
  ☆261Updated 5 months ago
• JHUAPL / Low-Regret-Methodology
  ☆28Updated 4 years ago
• dwillowtree / diana
  Save toil in security operations with: Detection & Intelligence Analysis for New Alerts (D.I.A.N.A. )
  ☆187Updated 11 months ago
• splunk / salo
  Synthetic Adversarial Log Objects: A Framework for synthentic log generation
  ☆83Updated last year
• LetMeR00t / TA-thehive-cortex
  Technical add-on for Splunk related to TheHive/Cortex from TheHive project
  ☆53Updated this week
• flowintel / flowintel
  An open source platform to support analysts to organise their case and tasks
  ☆100Updated this week
• center-for-threat-informed-defense / attack-workbench-frontend
  An application allowing users to explore, create, annotate, and share extensions of the MITRE ATT&CK® knowledge base. This repository con…
  ☆375Updated this week
• SophosRapidResponse / OSQuery
  ☆86Updated 5 months ago
• AttackIQ / pySigma-backend-kusto
  ☆42Updated last month
• UncoderIO / Uncoder_IO
  An IDE and translation engine for detection engineers and threat hunters. Be faster, write smarter, keep 100% privacy.
  ☆156Updated 6 months ago
• coolacid / docker-misp
  A (nearly) production ready Dockered MISP
  ☆232Updated last year