corelight / Dashboards-Splunk-DNS-Hunting-Beaconing
DNS Dashboard for hunting and identifying beaconing
☆14Updated 4 years ago
Related projects ⓘ
Alternatives and complementary repositories for Dashboards-Splunk-DNS-Hunting-Beaconing
- MasterParser is a simple, all-in-one, digital forensics artifact parser☆23Updated 3 years ago
- ☆11Updated 3 years ago
- Winterfell hunt is a python script to perform auto threat hunting for malicious activities in windows OS based on collected data by winte…☆14Updated 4 years ago
- Send High & New Incidents to The Hive incident management Platform☆17Updated 3 years ago
- A script to assist in processing forensic RAM captures for malware triage☆27Updated 3 years ago
- Accelerating the collection, processing, analysis and outputting of digital forensic artefacts.☆31Updated 3 weeks ago
- This repository contains sample log data that were collected after running adversary simulations in Microsoft 365☆20Updated last month
- A few quick recipes for those that do not have much time during the day☆21Updated 3 weeks ago
- Incident Response Report Using GitHub-Sphinx☆19Updated 5 years ago
- General Content☆20Updated 4 months ago
- IOCPARSER.COM is a Fast and Reliable service that enables you to extract IOCs and intelligence from different data sources.☆34Updated 2 years ago
- Track progress and keep notes while working through likethecoins' CTI Self Study Plan☆28Updated 2 years ago
- A project that aims to automate Volatility3 at scale with the use of cloud strength and the power of KQL inside ADX.☆15Updated 3 weeks ago
- Scripts to integrate DFIR-IRIS, MISP and TimeSketch☆31Updated 2 years ago
- Library of threat hunts to get any user started!☆40Updated 4 years ago
- Penguin OS Forensic (or Flight) Recorder☆37Updated 4 months ago
- A MITRE ATT&CK Lookup Tool☆43Updated 6 months ago
- ☆41Updated 7 months ago
- Assist analyst and threat hunters to understand Windows authentication logs and to analyze brutforce scenarios.☆18Updated last year
- Windows Security Logging☆43Updated 2 years ago
- Git for me to put all my forensics stuff☆21Updated 2 months ago
- Automatic detection engineering technical state compliance☆50Updated 4 months ago
- PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.☆35Updated last year
- CSIRT Jump Bag☆27Updated 6 months ago
- An experimental Velociraptor implementation using cloud infrastructure☆21Updated last week
- A tool to modify timestamps in a packet capture to a user selected date☆31Updated 3 years ago
- VTC - Velociraptor Timeline Creator☆15Updated 6 months ago
- Small-scale threat emulation and detection range built on Elastic and Atomic Redteam.☆35Updated 11 months ago
- A happy place for detection engineers, purple teamers and threat hunters focusing on macOS.☆20Updated 2 years ago
- Cyber Analytics Platform and Examination System (CAPES) Project Page☆14Updated 2 years ago