daveherrald / TA-cyberchefLinks
A set of Splunk workflow action definitions to export field values to CyberChef for further analysis.
☆13Updated 7 years ago
Alternatives and similar repositories for TA-cyberchef
Users that are interested in TA-cyberchef are comparing it to the libraries listed below
Sorting:
- Add-on for ingesting DMARC aggregate reports into Splunk☆15Updated 3 years ago
- Integrate Zeek with Alienvault OTX☆25Updated 5 years ago
- InvestigationPlaybookSpec☆72Updated 8 years ago
- Cyber Analytics Platform and Examination System (CAPES) Project Page☆60Updated 6 years ago
- ☆55Updated 3 years ago
- Simple block lists hub for PAN-OS DBL feature☆35Updated 6 years ago
- Connector for pulling and converting STIX information from TAXII Service Providers into CB Feeds.☆15Updated 3 years ago
- Report Generation from the Carbon Black REST API☆15Updated 3 years ago
- ☆48Updated 9 years ago
- MineMeld nodes for MISP☆19Updated last year
- ☆38Updated 7 years ago
- CB API scripts for IR, administration, etc.☆32Updated 6 years ago
- Sysmon Splunk App☆47Updated 7 years ago
- Network Forensics Bro scripts & pcap samples☆63Updated 11 years ago
- Splunk csv to KVStore ES Threat Intel☆11Updated 9 years ago
- Collecting & Hunting for IOCs with gusto and style☆117Updated 7 years ago
- Tools to search through massive amounts of data☆21Updated last month
- ☆50Updated 5 years ago
- Assimilate is a series of scripts for using the Naïve Bayes algorithm to find potential malicious activity in HTTP headers☆92Updated 8 years ago
- Carbon Black Feeds☆73Updated 2 years ago
- Python Wrapper for Tanium's SOAP API☆44Updated 6 years ago
- ELK configuration files for Forensic Analysts and Incident Handlers (unmaintained)☆179Updated 6 years ago
- pan-stix☆19Updated 8 years ago
- A collection of awesome resources built for and around the Splunk Phantom platform.☆15Updated 5 years ago
- Engine of MineMeld☆141Updated 2 years ago
- A Splunk app with saved reports derived from Sigma rules☆73Updated 7 years ago
- Beholder is a shell script which installs and configures essentials to peer into your network activity.☆19Updated 8 years ago
- This is the Splunk App integrated with Tanium☆10Updated 8 years ago
- Example Splunk Alert Scripts☆20Updated 10 years ago
- ☆194Updated last year