Elastic version of SOC prime watcher rules
☆30Oct 14, 2024Updated 2 years ago
Alternatives and similar repositories for Elasticsearch_rules
Users that are interested in Elasticsearch_rules are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Mapping Corelight or Zeek data to Elastic Common Schema logs☆12Updated this week
- Corelight or Zeek Elastic Common Schema Templates☆11Oct 22, 2026Updated last week
- Mapping Corelight or Zeek data to Elastic Common Schema fields☆35Oct 22, 2026Updated last week
- Zeek support for Community ID flow hashing.☆37Jul 11, 2023Updated 3 years ago
- A userscript that enhances the SentinelOne PowerQuery interface with a custom threat hunting button that follow the website UI / UX desig…☆13May 30, 2026Updated 5 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- OSSEM Data Dictionaries☆68Jan 22, 2025Updated last year
- ☆17Aug 27, 2022Updated 4 years ago
- OCSF Schema Validation☆13Sep 24, 2026Updated last month
- A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for…☆41Aug 18, 2022Updated 4 years ago
- Powershell Based tool for gathering information related to O365 intrusions and potential Breaches☆18Dec 29, 2024Updated last year
- A LLM-powered log ingestion tool.☆16Jun 28, 2026Updated 4 months ago
- ☆14Nov 18, 2021Updated 4 years ago
- Scripts to check for security issues with SSH keys and authorized_keys files on Linux and other Unix-like operating systems.☆25Sep 29, 2025Updated last year
- ☆17Aug 27, 2026Updated 2 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Exam Report Template - eWPT☆24Oct 18, 2021Updated 5 years ago
- Open source endpoint agent providing host information to Zeek. [v2]☆92Sep 23, 2026Updated last month
- YARA Standalone WSS is an offline webshell scanning tool that uses YARA rules to detect malicious or suspicious files in webroot director…☆13Aug 4, 2025Updated last year
- HTTP Headers Hashing (HHHash) is a technique used to create a fingerprint of an HTTP server based on the headers it returns.☆80Aug 22, 2023Updated 3 years ago
- ☆133Mar 21, 2024Updated 2 years ago
- ☆21Sep 11, 2026Updated last month
- Generates a detailed CSV file containing Sigma Rules statistics for each service or category, and each level, offering a holistic view of…☆10Dec 22, 2023Updated 2 years ago
- This repository contains a comprehensive testing designed for evaluating the performance and resilience of Endpoint Detection and Respons…☆67Oct 16, 2024Updated 2 years ago
- Security content lifecycle management for Microsoft Sentinel and Microsoft Defender XDR.☆17Oct 18, 2026Updated 2 weeks ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Tools by cooey comrades for cooey comrades.☆16Feb 23, 2023Updated 3 years ago
- ☆11Dec 17, 2023Updated 2 years ago
- OSCP preparation☆12Sep 18, 2025Updated last year
- Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings☆123Jul 12, 2021Updated 5 years ago
- This project contains a **test executable** specifically designed to trigger incidents in **Microsoft Defender for Endpoint (MDE)**. It…☆14Jul 20, 2025Updated last year
- Alternative Index Lifecycle Management decoupled from Elastic with more granularity☆13Feb 4, 2026Updated 8 months ago
- Tools once available from McAfee but are no longer☆13May 9, 2024Updated 2 years ago
- Youtube Resume Build☆12May 16, 2024Updated 2 years ago
- SentinelOne STAR Rules☆82Feb 11, 2025Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Beginners Guide to Hunting for Threats☆21Apr 26, 2025Updated last year
- Proof of concept communications from C# via a web browser process☆21Feb 15, 2019Updated 7 years ago
- Python script to automatically create sigma rules from The hive observables☆25Mar 17, 2019Updated 7 years ago
- Utility to get Angular route and query params by using dependency injection☆10Jun 30, 2021Updated 5 years ago
- Open KLara Project☆37May 18, 2026Updated 5 months ago
- Contains the source code for Shieldchecker.☆16Jul 17, 2026Updated 3 months ago
- This repo aims to help you decipher the UAL from a Digital Forensics & Incident Response (DFIR) perspective. The UAL is the Microsoft 365…☆67May 12, 2024Updated 2 years ago