elastic / cortadoLinks
☆13Updated 3 months ago
Alternatives and similar repositories for cortado
Users that are interested in cortado are comparing it to the libraries listed below
Sorting:
- Detection-as-Code CI/CD pipeline for modern security operations (SIEM, EDR, XDR, ...)☆22Updated 7 months ago
- Technical add-on for Splunk related to TheHive/Cortex from TheHive project☆53Updated 2 months ago
- SIEGMA - Transform Sigma rules into SIEM consumables☆157Updated 9 months ago
- This is a repository of vendor-agnostic workflows provided for those interested in deploying Security Orchestration, Automation, and Resp…☆89Updated 4 years ago
- A tool that allows you to document and assess any security automation in your SOC☆47Updated last year
- Parse wazuh[HIDS] alerts into ECS mapping using Filebeat☆28Updated 5 years ago
- ☆28Updated 2 weeks ago
- A collection of Cortex Analyzers and Responders for TheHive/Cortex☆13Updated 5 years ago
- This repository contains a few examples of actions that can be added to rules within Elastic Security.☆24Updated 10 months ago
- MISP-STIX-Converter - Python library to handle the conversion between MISP and STIX formats☆56Updated this week
- Synthetic Adversarial Log Objects: A Framework for synthentic log generation☆85Updated last year
- ☆29Updated 4 years ago
- Apps to be used for Shuffle automation. Most of Shuffle's apps (2500+) are generated from APIs, and available in the search engine below:☆120Updated last week
- Dettectinator - The Python library to your DeTT&CT YAML files.☆118Updated 8 months ago
- ☆98Updated 3 years ago
- The Sigma command line interface based on pySigma☆166Updated last week
- Summiting the Pyramid is a research project focused on engineering cyber analytics to make adversary evasion more difficult. The research…☆51Updated 6 months ago
- Splunk Content Control Tool☆124Updated last week
- Roota is a public-domain language of threat detection and response that combines native queries from a SIEM, EDR, XDR, or Data Lake with …☆132Updated last year
- List of sigma for a variety of threats for multiple log sources.☆13Updated 7 years ago
- This is a python tool aiming to make using TheHive webhooks easier.☆28Updated 5 years ago
- MISP to Splunk Enterprise Security Theat Intelligence Framework Integration☆14Updated 2 years ago
- A POC to implement Detection-as-Code with Terraform and Sumo Logic.☆29Updated 2 years ago
- Command line tool to interact with Chronicle's Config Based Normalizer (CBN) APIs.☆31Updated 2 years ago
- An IDE and translation engine for detection engineers and threat hunters. Be faster, write smarter, keep 100% privacy.☆166Updated last week
- Collects a listing of MITRE ATT&CK Techniques, then discovers Splunk ESCU detections for each technique☆69Updated last year
- Mapping Corelight or Zeek data to Elastic Common Schema fields☆34Updated last month
- Threat Detection & Anomaly Detection rules for popular open-source components☆53Updated 3 years ago
- A python package for use in generating fake data for SOC and security automation.☆172Updated 9 months ago
- Docker image for MISP☆135Updated last week