Elastic Beat for fetching and shipping Office 365 audit events
☆66Sep 9, 2020Updated 6 years ago
Alternatives and similar repositories for o365beat
Users that are interested in o365beat are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Gets events from the Office 365 unified audit log and outputs their details into the pipeline☆16Dec 16, 2020Updated 5 years ago
- This package allows the use of a custom Elastalert Alert which creates alerts with observables in TheHive using TheHive4Py.☆26May 18, 2021Updated 5 years ago
- Create alerts in The Hive from your Graylog alerts, to be turned into Hive cases.☆45Aug 17, 2020Updated 6 years ago
- Collect / retrieve Office365, AzureAD and DLP audit logs and output to PRTG, Azure Log Analytics Workspace, SQL, Graylog, Fluentd, and/or…☆124Mar 25, 2024Updated 2 years ago
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆17Jan 6, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- SysScout is a fully encapsulated script that quickly and easily pulls local machine information from Linux-Based systems. A simple, easy…☆13Oct 20, 2017Updated 9 years ago
- a library of Logstash pipeline configuration files mapping data to the Elastic Common Schema☆10Feb 28, 2021Updated 5 years ago
- Technical add-on to ingest json formatted volatility memory analysis plugin outputs☆13May 21, 2018Updated 8 years ago
- Sysmon Tools for PowerShell☆12Aug 17, 2018Updated 8 years ago
- Threat hunting repo for my independent study on threat hunting with OSQuery☆27Jan 16, 2018Updated 8 years ago
- A Volatility command reference mind map☆14Sep 20, 2018Updated 8 years ago
- sFlow plugin for Fluentd☆12Sep 3, 2021Updated 5 years ago
- This repository was created to aid in the deployment/maintenance of the Sysmon service on a large number of computers.☆83Mar 20, 2023Updated 3 years ago
- Primary data pipelines for intrusion detection, security analytics and threat hunting☆85Jan 9, 2022Updated 4 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- This repository is created to add value to existing Network Security Monitoring solutions.☆17Sep 30, 2016Updated 10 years ago
- The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL)☆159Mar 27, 2023Updated 3 years ago
- Scripts used to create ISO installers of ROCK for offline installation.☆10Mar 13, 2023Updated 3 years ago
- Configuration guidance for implementing collection of security relevant Windows Event Log events by using Windows Event Forwarding. #nsac…☆893Nov 17, 2020Updated 5 years ago
- ☆16Sep 8, 2026Updated last month
- ☆30Nov 15, 2018Updated 7 years ago
- An extension of the sigma standard to include security metrics.☆17May 18, 2023Updated 3 years ago
- ☆16May 22, 2015Updated 11 years ago
- Stand-alone parser for User Access Logging from Server 2012 and newer systems☆79Jan 9, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Collection of scripts provided for public use☆46Aug 19, 2026Updated 2 months ago
- A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.☆483Nov 15, 2024Updated last year
- pySigma Cookiecutter backend template☆25Sep 17, 2025Updated last year
- Encase Script to parse harddrive for MFT data☆16Jun 17, 2016Updated 10 years ago
- Folder-structure and some examples for setting up a new ansible-project.☆10Dec 31, 2022Updated 3 years ago
- FIles and guides related to using Elasticstack as a SIEM☆12May 16, 2020Updated 6 years ago
- A collection of scripts from around the web to be used with OSCP☆12Feb 4, 2017Updated 9 years ago
- Pcap recording of Heralding sessions☆10Jan 19, 2018Updated 8 years ago
- Beacon Kibana Executable Report. Aggregates Sysmon Network Events With Elasticsearch and Kibana☆303Mar 19, 2026Updated 7 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Sublime rules for email attack detection, prevention, and threat hunting.☆381Updated this week
- Sparrow.ps1 was created by CISA's Cloud Forensics team to help detect possible compromised accounts and applications in the Azure/m365 en…☆1,432Dec 27, 2022Updated 3 years ago
- Ansible role to install auditbeat for security monitoring. (Ruleset included)☆15Nov 16, 2023Updated 2 years ago
- Carve NTFS USN records from binary data☆27May 21, 2017Updated 9 years ago
- Powershell Module for the Sentinel One API☆12Jan 18, 2025Updated last year
- Powershell Based tool for gathering information related to O365 intrusions and potential Breaches☆960Jun 10, 2026Updated 4 months ago
- ☆12Dec 23, 2021Updated 4 years ago