cvandeplas / ELK-forensics
ELK configuration files for Forensic Analysts and Incident Handlers (unmaintained)
☆179Updated 5 years ago
Related projects ⓘ
Alternatives and complementary repositories for ELK-forensics
- Docker container for MISP☆96Updated 6 years ago
- Collecting & Hunting for IOCs with gusto and style☆116Updated 6 years ago
- Cyber Analytics Platform and Examination System (CAPES) Project Page☆60Updated 5 years ago
- Improvements of/over the original rule2alert☆56Updated 9 years ago
- Bro scripts written by CrowdStrike Services☆146Updated 3 years ago
- DEPRECATED - USE v3 (bearded-avenger)☆227Updated 6 years ago
- Bro scripts to be shared with the community☆109Updated 11 years ago
- Dockerfiles for NSM tools☆84Updated 7 years ago
- Script for generating Bro intel files from pdf or html reports☆75Updated 8 years ago
- Network Forensics Bro scripts & pcap samples☆62Updated 10 years ago
- Scripts for Bro IDS and ELK Stack☆56Updated 9 years ago
- Carbon Black Feeds☆70Updated last year
- ☆72Updated 2 years ago
- Dashboards and loader for ROCK NSM dashboards☆47Updated last year
- QRadio ~ Best Threat Intelligence Radio ~ Tune In!☆96Updated 8 years ago
- a Malware/Threat Analyst Desktop☆89Updated 9 years ago
- Isolated, Scalable, & Lightweight Environment for Training☆111Updated 5 years ago
- Threat Analysis, Reconnaissance, and Data Intelligence System☆121Updated 9 years ago
- CIF v3 -- the fastest way to consume threat intelligence☆184Updated last year
- Aggregates security threats from a number of online sources, and outputs to Syslog CEF, Snort Signatures, Iptables rules, hosts.deny, etc…☆79Updated 8 years ago
- Salt States for Configuring the SIFT Workstation☆96Updated this week
- Harbinger Threat Intelligence☆82Updated 8 years ago
- Evolving directions on building the best Open Source Forensics VM☆159Updated 6 years ago