criblio / collector-templatesLinks
Templates for Cribl Stream Collectors
☆45Updated last week
Alternatives and similar repositories for collector-templates
Users that are interested in collector-templates are comparing it to the libraries listed below
Sorting:
- Splunk Content Control Tool☆114Updated this week
- This repository contains Community and Field contributed content for LogScale☆255Updated 2 weeks ago
- Web based S1 query navigator for one-click threat hunting☆21Updated 4 years ago
- Splunk App for Cribl Stream and Edge Observability☆25Updated 3 weeks ago
- RBA is Splunk's method to aggregate low-fidelity security events as interesting observations tagged with security metadata to create high…☆56Updated last week
- Repository of SentinelOne Deep Visibility queries.☆129Updated 4 years ago
- Azure Functions for getting data in to Splunk☆32Updated 6 months ago
- compliance assessment and POA&M management for CMMC/NIST 800-171A☆93Updated 7 months ago
- Discover for Cloud and Containers Azure☆29Updated 6 months ago
- 🚨ATTENTION🚨 The Security Stack Mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is k…☆386Updated last year
- ☆96Updated 2 years ago
- Splunk Connect for Syslog☆166Updated this week
- Repository with Sample KQL Query examples for Threat Hunting☆215Updated 2 years ago
- The CrowdStrike Falcon SDK for Python☆426Updated this week
- PowerShell for CrowdStrike's OAuth2 APIs☆427Updated this week
- TrackMe - Data tracking system for Splunk admins☆50Updated 2 years ago
- ☆86Updated 5 months ago
- scripts using splunk application lookup-editor endpoint. Download, upload and update splunk lookups content☆29Updated last year
- A collection of Splunk's Search Processing Language (SPL) for Threat Hunting with CrowdStrike Falcon☆208Updated 5 years ago
- Programming Microsoft Sentinel book☆25Updated last year
- Dettectinator - The Python library to your DeTT&CT YAML files.☆115Updated 4 months ago
- Simple integration script for 3rd party systems such as SIEMs. Offers command line, file or syslog output in CEF, JSON or key-value pair …☆136Updated last year
- Scripts to streamline the deployment and use of the CrowdStrike Falcon sensor☆180Updated last week
- Cribl Environment for learning LogStream☆13Updated 4 years ago
- Microsoft Sentinel, Defender for Endpoint - KQL Detection Packs☆55Updated 2 years ago
- Splunk (Other Splunk scripts which do not fit into the SplunkAdmins application)☆41Updated 2 months ago
- MISP to Sentinel integration☆69Updated 2 weeks ago
- Save toil in security operations with: Detection & Intelligence Analysis for New Alerts (D.I.A.N.A. )☆187Updated 11 months ago
- Building environments to replicate small networks and deploy applications☆324Updated 6 months ago
- A list of Splunk queries that I've collected and used over time.☆85Updated 4 years ago