MISP to Microsoft Defender integration
☆18Jul 9, 2026Updated 2 months ago
Alternatives and similar repositories for misp2defender
Users that are interested in misp2defender are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- KQL for Azure Resource Manager and AppID search☆23Aug 15, 2024Updated 2 years ago
- Generates a detailed CSV file containing Sigma Rules statistics for each service or category, and each level, offering a holistic view of…☆10Dec 22, 2023Updated 2 years ago
- SOCAutomators Substack blog companion — threat research, DBIR analysis, and security operations content☆21Jun 3, 2026Updated 3 months ago
- Deep Packet Inspection • Traffic Forensics • Network Threat Detection☆56Feb 20, 2026Updated 7 months ago
- Rulezet is an open-source web platform for sharing, evaluating, improving, and managing cybersecurity detection rules (YARA, Sigma, Suric…☆56Updated this week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Random Powershell scripts☆13Feb 13, 2024Updated 2 years ago
- Expose a lot of MDE telemetry that is not easily accessible in any searchable form☆122Aug 19, 2025Updated last year
- PowerShell-based Windows Server Security Audit Engine by Cyb3rint3l Labs. Measures alignment with the NIS2 directive and maps findings to…☆47Feb 1, 2026Updated 7 months ago
- Incident Response documents and tooling☆133Jul 22, 2026Updated 2 months ago
- ☆22Jan 31, 2023Updated 3 years ago
- MDE Tester is designed to help testing various features in Microsoft Defender for Endpoint.☆194Feb 20, 2026Updated 7 months ago
- KustoHawk is a lightweight incident triage and response tool designed for effective incident response in Microsoft Defender XDR and Micro…☆159Apr 1, 2026Updated 5 months ago
- MineMeld nodes for MISP☆19Jan 23, 2024Updated 2 years ago
- MISP to Sentinel integration☆80Jul 4, 2026Updated 2 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- An informational repo about hunting for adversaries in your IT environment.☆14Apr 10, 2017Updated 9 years ago
- Community-driven PowerShell detection indicators☆43Jan 27, 2026Updated 7 months ago
- Playbooks designed for IBM SOAR developed by The IR Gurus. These playbooks can be used to demonstrate how to design playbooks, perform au…☆19May 1, 2024Updated 2 years ago
- Menu for Thor scanner lite☆20Oct 24, 2025Updated 10 months ago
- A collection of Cortex Analyzers and Responders for TheHive/Cortex☆13Jan 29, 2020Updated 6 years ago
- A web application for generating, parsing and validating, manipulating, visualizing and executing CACAO v2.0 playbooks.☆43Jun 6, 2026Updated 3 months ago
- shellDAVpass application is the Open-Source project, the main idea of which is to bypass the defender and AntiVirus detections to conduct…☆27Oct 3, 2025Updated 11 months ago
- ☆21Jul 9, 2026Updated 2 months ago
- This project contains a **test executable** specifically designed to trigger incidents in **Microsoft Defender for Endpoint (MDE)**. It…☆14Jul 20, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A 30-day hands-on SOC Analyst project simulating real-world cyber attacks using ELK Stack, Mythic C2, osTicket & Elastic Defend. Covers t…☆45Jun 10, 2025Updated last year
- A Windows Event Log MCP☆53Aug 25, 2025Updated last year
- Technology and Security Fundamentals☆22Nov 5, 2025Updated 10 months ago
- Cyber Threat Intelligence☆83Dec 7, 2025Updated 9 months ago
- MAES: M365 Analyzer & Extractor Suite Po☆36Aug 8, 2026Updated last month
- Unofficial third-party scripts, playbooks, and content for IBM QRadar & QRadar Community Edition.☆87May 8, 2025Updated last year
- A script to create and assign SOP tasks into the cases☆20Aug 16, 2020Updated 6 years ago
- Outil de triage automatisé de différents types de collectes d'artefacts.☆18Dec 8, 2025Updated 9 months ago
- A preconfigured Velociraptor triage collector☆78Aug 10, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Notes on responding to security breaches relating to Azure AD☆126Mar 14, 2022Updated 4 years ago
- Forensic tool for extracting and analyzing Google DriveFS cached files and metadata.☆23May 9, 2025Updated last year
- A script designed to test passwords against user accounts within an Active Directory environment, offering customizable Account Lockout T…☆17Jan 28, 2026Updated 7 months ago
- ☆12Oct 9, 2022Updated 3 years ago
- Terraform-deployable Azure security lab with intentionally vulnerable resources for learning and practicing attack paths in your own tena…☆38Jul 24, 2026Updated last month
- TIBER-Cases is a project created to give cases of The Hive platform for Threat Intelligence Analysts mainly. All the cases are mapped to …☆27Jul 13, 2022Updated 4 years ago
- Python script to automatically create sigma rules from The hive observables☆25Mar 17, 2019Updated 7 years ago