Alternatives and similar repositories for endpoint:

Users that are interested in endpoint are comparing it to the libraries listed below

• OTRF / OSSEM-DD
  OSSEM Data Dictionaries
  ☆59Updated 3 months ago
• elastic / detection-rules-explorer
  ☆19Updated this week
• threat-punter / community-contributions
  A collection of my presentations, blog posts, and other contributions to the information security community
  ☆26Updated this week
• SigmaHQ / pySigma-backend-splunk
  pySigma Splunk backend
  ☆38Updated 2 months ago
• NextronSystems / CyberChef
  CyberChef - Detection Engineering, TI, DFIR, Malware Analysis Edition
  ☆63Updated 2 years ago
• mitre / stockpile
  A CALDERA plugin
  ☆76Updated this week
• HASecuritySolutions / LogCampaign
  Provides detection capabilities and log conversion to evtx or syslog capabilities
  ☆53Updated 2 years ago
• CrowdStrike / MISP-tools
  Import CrowdStrike Threat Intelligence into your instance of MISP
  ☆46Updated last month
• corelight / Elasticsearch_rules
  Elastic version of SOC prime watcher rules
  ☆29Updated 6 months ago
• atc-project / atc-data
  Actionable data for Security Operations
  ☆18Updated 3 years ago
• Security-Onion-Solutions / securityonion-image
  ☆48Updated this week
• microsoft / MSTIC-Sysmon
  Anything Sysmon related from the MSTIC R&D team
  ☆152Updated 10 months ago
• thremulation-station / thremulation-station
  Small-scale threat emulation and detection range built on Elastic and Atomic Redteam.
  ☆38Updated last year
• splunk / attack_range_cloud
  Attack Range to test detection against nativel serverless cloud services and environments
  ☆35Updated 3 years ago
• abusech / ThreatFox
  Open IOC sharing platform
  ☆56Updated 5 months ago
• tuckner / automation-capability-matrix
  A tool that allows you to document and assess any security automation in your SOC
  ☆46Updated 5 months ago
• Neo23x0 / Talks
  Slides of my public talks
  ☆55Updated last year
• splunk / attack-detections-collector
  Collects a listing of MITRE ATT&CK Techniques, then discovers Splunk ESCU detections for each technique
  ☆67Updated last year
• mdecrevoisier / Splunk-input-windows-baseline
  Provides an advanced input.conf file for Windows and 3rd party related software with more than 70 different event log mapped to the MITRE…
  ☆90Updated 2 months ago
• mitre / atomic
  A MITRE Caldera plugin
  ☆43Updated 5 months ago
• NextronSystems / thor-lite
  Fast IOC and YARA Scanner
  ☆79Updated 5 years ago
• tsale / Intrusion_data
  This repository is created to store the artifacts for any intrusions I share publicly.
  ☆25Updated last year
• MHaggis / notes
  Full of public notes and Utilities
  ☆98Updated 2 months ago
• blackstork-io / fabric-templates
  Open-source Fabric templates for cybersecurity and compliance
  ☆17Updated 3 months ago
• The-DFIR-Report / Yara-Rules
  ☆68Updated 2 months ago
• RomaissaAdjailia / MindMaps
  ☆23Updated 2 years ago
• atc-project / atc-mitigation
  Actionable analytics designed to combat threats based on MITRE's ATT&CK.
  ☆22Updated 5 years ago
• OTRF / infosec-jupyter-book
  The Infosec Community Definitive Guide to Jupyter Notebooks
  ☆121Updated 4 years ago
• LogRhythm-Labs / Sigma
  Convert Sigma rules to LogRhythm searches
  ☆21Updated 3 years ago
• center-for-threat-informed-defense / sensor-mappings-to-attack
  Sensor Mappings to ATT&CK is a collection of resources to assist cyber defenders with understanding which sensors and events can help det…
  ☆49Updated last month