daveherrald / scansio-sonar-splunkView external linksLinks
Python scripts to download, parse, and enrich scans.io study data and load into Splunk for research, threat intelligence gathering, and security operations.
☆19Updated this week
Alternatives and similar repositories for scansio-sonar-splunk
Users that are interested in scansio-sonar-splunk are comparing it to the libraries listed below
Sorting:
- Atomic Red Team App for Phantom☆16Jul 7, 2020Updated 5 years ago
- Blackcert monitors Certificate Transparency Logs for a keyword. Blackcert collects any certificate changes for this keyword and also chec…☆10Dec 8, 2022Updated 3 years ago
- API to access the Redis database of a BGP Ranking instance.☆17Dec 11, 2017Updated 8 years ago
- Python-based cloud node for local use☆11Mar 7, 2018Updated 7 years ago
- Drill down into your python logs using JSON logs stored in Splunk - supports sending over TCP or the Splunk HEC REST API handlers (using …☆13Oct 18, 2022Updated 3 years ago
- A set of Splunk workflow action definitions to export field values to CyberChef for further analysis.☆13Jan 22, 2018Updated 8 years ago
- An active domain name query tool to help keep track of domain name movements...☆16Mar 28, 2021Updated 4 years ago
- ☆14Jul 8, 2016Updated 9 years ago
- Python scripts to parse scans.io ssl data and ingest into elasticsearch for searching☆33May 14, 2016Updated 9 years ago
- ☆18Jun 8, 2018Updated 7 years ago
- Transforms for the AlienVault OTX service☆39Nov 3, 2016Updated 9 years ago
- Machines created to speed up analysis inside of Maltego☆16Mar 17, 2016Updated 9 years ago
- Splunk App for MITRE Att&CK Navigator(TM)☆23Mar 25, 2021Updated 4 years ago
- Splunk Tableau Web Data Connector (WDC) Example☆20Oct 27, 2023Updated 2 years ago
- Invisible Watermarks with Space Characters in ASCII Files☆21Jun 14, 2018Updated 7 years ago
- Security Operations Center Multiple Purpose Tool, takes IP address input, conducts OSINT, conducts splunk, bro, fireeye, imperva, and fir…☆22Jun 6, 2017Updated 8 years ago
- IoC's, PCRE's, YARA's etc☆24Mar 25, 2025Updated 10 months ago
- Flexible framework that allows automation to process cyber threat information and update endpoint defense tools.☆20Oct 24, 2018Updated 7 years ago
- WebAMS is an Open Source web application for reporting and resolving incidents or tickets☆10Dec 11, 2022Updated 3 years ago
- ☆55Mar 2, 2022Updated 3 years ago
- YAIDS - Yara-Based IDS - Yara as an Intrusion Detection System / Yet Another Intrusion Detection System - An Intrusion Detection System (…☆25Oct 20, 2022Updated 3 years ago
- Script to automate, manage, and multithread Nikto scans.☆63Feb 12, 2020Updated 6 years ago
- Repository of scripts/tools that may be useful in Security Operations Centres (SOC)☆55Nov 25, 2020Updated 5 years ago
- MITRE ATT&CK Framework compliance dashboard and correlation searches that works with Splunk Enterprise Security and ES Content Update☆30Nov 7, 2025Updated 3 months ago
- OG Atomic Red Team☆29Jun 12, 2018Updated 7 years ago
- Traceroute improved wrapper for CSIRT and CERT operators☆40Oct 9, 2024Updated last year
- Client API to query the Phishing Initiative service API☆24Jan 8, 2026Updated last month
- Fun with Amazon AWS and Maltego☆29Jun 5, 2017Updated 8 years ago
- Fang and defang indicators of compromise. You can test this project in a GUI here: http://ioc-fanger.hightower.space .☆68Oct 2, 2023Updated 2 years ago
- Community driven repository of Playbooks and Apps for ThreatConnect.☆74Nov 5, 2025Updated 3 months ago
- Disclaimer: Please note that these materials are public available in several reference websites. These materials are not only the source …☆12Dec 31, 2023Updated 2 years ago
- Automation for VirusTotal☆31May 6, 2016Updated 9 years ago
- stoQ Public Plugins☆71Feb 27, 2023Updated 2 years ago
- Synapse: a Meta Alert Feeder for TheHive, a Security Incident Response Platform☆71Jul 28, 2023Updated 2 years ago
- Docker Splunk "Orchestration" bash script (6,000+ lines) to create fully automated pre-configured splunk site-2-site clusters or stand al…☆139Feb 29, 2020Updated 5 years ago
- ☆12Jun 9, 2021Updated 4 years ago
- Automatically scores how well Windows systems have implemented some of the top 10 Information Assurance mitigation strategies. #nsacyber☆76May 25, 2016Updated 9 years ago
- Simple versioning for your Splunk environment☆37Nov 14, 2024Updated last year
- the fastest way to consume threat intelligence.☆31Mar 9, 2023Updated 2 years ago