endgameinc / eqlLinks
☆227Updated 2 months ago
Alternatives and similar repositories for eql
Users that are interested in eql are comparing it to the libraries listed below
Sorting:
- ☆168Updated 5 years ago
- This project is no longer maintained. There's a successor at https://github.com/zeek/zeek-agent-v2☆124Updated 5 years ago
- Django web interface for managing Yara rules☆197Updated 7 years ago
- Parse YARA rules and operate over them more easily.☆195Updated 11 months ago
- Open-source framework to detect outliers in Elasticsearch events☆208Updated 2 years ago
- Security ML models encoded as Yara rules☆215Updated 2 years ago
- A Python library to help with some common threat hunting data analysis operations☆143Updated 2 years ago
- Log Entry to Sigma Rule Converter☆108Updated 3 years ago
- Deception based detection techniques mapped to the MITRE’s ATT&CK framework☆290Updated 8 years ago
- ☆135Updated 4 years ago
- Minimal, consistent Python API for building integrations with malware sandboxes.☆141Updated last year
- A tool to extract structured cyber information from incident reports.☆82Updated 7 years ago
- Mapping NSM rules to MITRE ATT&CK☆73Updated 5 years ago
- A Python package to interact with the Mitre ATT&CK Framework☆476Updated 2 years ago
- Data from a BRAWL Automated Adversary Emulation Exercise☆211Updated 5 years ago
- Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)☆103Updated 6 months ago
- ☆34Updated 5 years ago
- Threat Alert Logic Repository☆93Updated 6 years ago
- OASIS Cyber Threat Intelligence (CTI) TC Open Repository: Convert STIX 1.2 XML to STIX 2.x JSON☆52Updated last year
- ☆175Updated last year
- SIGMA UI is a free open-source application based on the Elastic stack and Sigma Converter (sigmac)☆189Updated 4 years ago
- An open source framework for enterprise level automated analysis.☆396Updated 3 years ago
- Python API wrapper for the Joe Sandbox API.☆68Updated this week
- Assimilate is a series of scripts for using the Naïve Bayes algorithm to find potential malicious activity in HTTP headers☆92Updated 8 years ago
- Simple, effective, and modular package for parsing observables (indicators of compromise (IOCs), network data, and other, security relate…☆178Updated 2 years ago
- Extension to Cuckoo Sandbox open source projects, adds support to AWS cloud functionalities and enables running emulation on auto-scaling…☆135Updated 3 years ago
- File Scanning Framework☆295Updated 4 years ago
- A lightweight tool to load Windows Event Log evtx files into Elasticsearch.☆119Updated 5 years ago
- YARA malware query accelerator (web frontend)☆436Updated 3 months ago
- Definition, description and relationship types of MISP objects☆105Updated this week