demisto / content-docsLinks
Demisto Content Developer Docs
☆43Updated last week
Alternatives and similar repositories for content-docs
Users that are interested in content-docs are comparing it to the libraries listed below
Sorting:
- Demisto Client for Python☆70Updated last week
- Demisto SDK - Create Demisto Content with ease and efficiency☆78Updated this week
- The unofficial XSOAR CLI☆14Updated 2 years ago
- OSSEM Common Data Model☆55Updated 2 years ago
- Collaborative Open Playbook Standard☆157Updated last year
- Ansible playbook for installing MineMeld on Linux☆48Updated 4 years ago
- Python idiomatic SDK for Cortex™ Data Lake.☆46Updated 3 months ago
- Subscribe to raw VMware Carbon Black EDR event feed and forward to another system, such as Splunk.☆73Updated last year
- Demisto's Dockerfiles and Image Build Management☆81Updated this week
- Phantom Apps Repo☆83Updated 3 years ago
- Attack Range to test detection against nativel serverless cloud services and environments☆35Updated 3 years ago
- Palo Alto Networks App for Splunk leverages the data visibility provided by Palo Alto Networks next-generation firewalls and endpoint sec…☆107Updated 8 months ago
- This repo represents work the Phantom Community collaborates on to build apps and learn.☆12Updated 4 years ago
- An application allowing users to explore, create, annotate, and share extensions of the MITRE ATT&CK® knowledge base. This repository con…☆47Updated last week
- A CALDERA plugin☆77Updated 3 weeks ago
- A collection of notebooks built for defensive and offensive operations.☆77Updated 4 years ago
- Sysmon Splunk App☆46Updated 6 years ago
- A few scripts I put together to send and receive data from an Azure Log Analytics workspace leveraging the Azure Monitor HTTP Data Collec…☆23Updated 2 years ago
- Coding examples for the OpenDNS Investigate API☆24Updated 5 years ago
- Allows to pull asset and identity data into Splunk app for Enterprise Security from LDAP and other sources☆27Updated 7 years ago
- Prototypes for MineMeld nodes☆39Updated 3 years ago
- Carbon Black Feeds☆73Updated 2 years ago
- A collection of scripts useful in management of Splunk deployment☆20Updated 10 months ago
- A Splunk app with saved reports derived from Sigma rules☆73Updated 7 years ago
- MineMeld nodes for MISP☆19Updated last year
- A Splunk add-on (aka modular input) that brings Metrics and Diagnostic Logs from various Azure ARM resources and the subscription-wide Ac…☆62Updated 4 years ago
- ☆55Updated 3 years ago
- Collection of resources related to the Center for Threat-Informed Defense☆76Updated last year
- Threat Alert Logic Repository☆92Updated 6 years ago
- Community driven repository of Playbooks and Apps for ThreatConnect.☆71Updated 5 months ago