coolacid / misp_feedgen
Feed Generator for MISP
☆19Updated 2 years ago
Alternatives and similar repositories for misp_feedgen:
Users that are interested in misp_feedgen are comparing it to the libraries listed below
- Scripts for accessing and transforming cyber threat intelligence☆26Updated 9 years ago
- Pulls IOCs from MISP and adds the to reference sets in QRadar☆33Updated last year
- A Splunk app to use MISP in background☆110Updated 2 weeks ago
- Scripts for TheHive.☆22Updated 5 years ago
- Tool to extract indicators of compromise from security reports in PDF format☆71Updated 8 months ago
- Volatility plugins developed and maintained by the community☆21Updated 5 months ago
- Sigma Detection Rule Repository☆87Updated 4 years ago
- Slides and Other Resources from my latest Talks and Presentations☆24Updated 4 years ago
- Analyze binaries collected in VMware Carbon Black EDR against Yara rules.☆37Updated 2 years ago
- misp-cloud - Cloud-ready images of MISP☆72Updated 2 years ago
- Utilizing your Threat data from a MISP instance into CarbonBlack Response by exposing the data in the Threat Intelligence Feed.☆19Updated 2 years ago
- Open source training materials for law-enforcement and organisations interested in DFIR.☆56Updated last month
- Powershell Functions to interact with TheHive-Project☆10Updated 5 years ago
- InvestigationPlaybookSpec☆72Updated 7 years ago
- Imports Alienvault OTX pulses to a MISP instance☆52Updated 3 years ago
- MISP-STIX-Converter - Python library to handle the conversion between MISP and STIX formats☆53Updated this week
- ☆39Updated 5 years ago
- This is a python tool aiming to make using TheHive webhooks easier.☆27Updated 4 years ago
- Miscelaneous Dockers☆46Updated 3 years ago
- Connect your mail client/infrastructure to MISP in order to create events based on the information contained within mails.☆69Updated last year
- automate your MISP installs☆66Updated 4 years ago
- Import specific data sources into the Sigma generic and open signature format.☆77Updated 2 years ago
- A community event for security researchers to share their favorite notebooks☆107Updated last year
- Fang and defang indicators of compromise. You can test this project in a GUI here: http://ioc-fanger.hightower.space .☆57Updated last year
- ☆33Updated 4 years ago
- Collection of useful, up to date, Carbon Black Response Queries☆83Updated 4 years ago
- Incident response teams usually working on the offline data, collecting the evidence, then analyze the data☆44Updated 3 years ago
- A Splunk app with saved reports derived from Sigma rules☆73Updated 6 years ago
- Definition, description and relationship types of MISP objects☆94Updated last week
- ☆34Updated 4 years ago