Alternatives and similar repositories for cortex-xdr-client

Users that are interested in cortex-xdr-client are comparing it to the libraries listed below

• chronicle / GCTI
  ☆553Updated last year
• microsoft / MSTIC-Sysmon
  Anything Sysmon related from the MSTIC R&D team
  ☆156Updated last year
• Securonix / AutonomousThreatSweeper
  Threat Hunting queries for various attacks
  ☆239Updated this week
• zeronetworks / ldapfw
  Protect your Domain Controllers by auditing and restricting LDAP requests
  ☆176Updated 4 months ago
• center-for-threat-informed-defense / attack_to_cve
  🚨ATTENTION🚨 The CVE mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as…
  ☆241Updated last year
• NextronSystems / ransomware-simulator
  Ransomware simulator written in Golang
  ☆450Updated 3 years ago
• center-for-threat-informed-defense / attack-flow
  Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by devel…
  ☆690Updated 2 months ago
• CrowdStrike / OWASSRF
  ☆13Updated 2 years ago
• center-for-threat-informed-defense / insider-threat-ttp-kb
  The principal objective of this project is to develop a knowledge base of the tactics, techniques, and procedures (TTPs) used by insiders…
  ☆146Updated 3 months ago
• MazX0p / ThreatHound
  ☆160Updated last year
• cyware-labs / Threat-Response-Docker
  ☆44Updated 2 years ago
• lightspin-tech / lightspin-2022-top-7-attack-paths
  Based on Lightspin proprietary data, research, and our tracking of cloud security trends in the market, our research team has compiled a …
  ☆40Updated 3 years ago
• op7ic / EDR-Testing-Script
  Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-Cradle…
  ☆307Updated 3 years ago
• mitre / atomic
  A MITRE Caldera plugin
  ☆46Updated last week
• netwrix / PingCastleCloud
  Audit program for AzureAD
  ☆149Updated 2 years ago
• whikernel / evtx2splunk
  Evtx to Splunk ingestor
  ☆15Updated 3 years ago
• sublime-security / sublime-rules
  Sublime rules for email attack detection, prevention, and threat hunting.
  ☆328Updated last week
• mitre / sandcat
  A CALDERA plugin
  ☆69Updated last week
• vectra-ai-research / MAAD-AF
  MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).
  ☆405Updated last year
• claroty / arya
  Arya is a unique tool that produces pseudo-malicious files meant to trigger YARA rules. You can think of it like a reverse YARA.
  ☆259Updated 2 years ago
• OTRF / OSSEM-DM
  OSSEM Detection Model
  ☆180Updated 3 years ago
• drb-ra / C2IntelFeeds
  Automatically created C2 Feeds
  ☆648Updated last week
• sbasu7241 / AWS-Threat-Simulation-and-Detection
  Playing around with Stratus Red Team (Cloud Attack simulation tool) and SumoLogic
  ☆300Updated 2 years ago
• Yamato-Security / hayabusa-rules
  Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.
  ☆205Updated last week
• mdecrevoisier / Splunk-input-windows-baseline
  Provides an advanced input.conf file for Windows and 3rd party related software with more than 70 different event log mapped to the MITRE…
  ☆94Updated 3 months ago
• jatrost / awesome-detection-rules
  This is a collection of threat detection rules / rules engines that I have come across.
  ☆299Updated last year
• joeavanzato / RetrievIR
  PowerShell script designed to help Incident Responders collect forensic evidence from local and remote Windows devices.
  ☆107Updated last year
• chronicle / detection-rules
  Collection of example YARA-L rules for use within Google Security Operations
  ☆448Updated 2 weeks ago
• SigmaHQ / sigma-cli
  The Sigma command line interface based on pySigma
  ☆161Updated last month
• center-for-threat-informed-defense / top-attack-techniques
  Top ATT&CK Techniques helps defenders approach the breadth and complexity of MITRE ATT&CK® with a prioritized top 10 list of techniques t…
  ☆118Updated 4 months ago