enisaeu / Reference-Security-Incident-Taxonomy-Task-Force
This repository hosts files relating to the TF-CSIRT Reference Security Incident Taxonomy Working Group.
☆64Updated 5 months ago
Alternatives and similar repositories for Reference-Security-Incident-Taxonomy-Task-Force:
Users that are interested in Reference-Security-Incident-Taxonomy-Task-Force are comparing it to the libraries listed below
- The aim of this repository is to provide a list of examples of tools, sources and measures available to incident response teams☆58Updated 4 years ago
- Scripts for TheHive.☆22Updated 5 years ago
- Cerebrate is an open-source platform meant to act as a trusted contact information provider and interconnection orchestrator for other se…☆85Updated 2 months ago
- Home for TRANSITS materials☆23Updated 7 months ago
- References for FIRST CTI 2019 Symposium presentation☆23Updated 5 years ago
- Connect your mail client/infrastructure to MISP in order to create events based on the information contained within mails.☆69Updated last year
- The Cyber Security Platform MeliCERTes is part of the European Strategy for Cyber Security. MeliCERTes is a network for establishing conf…☆31Updated 3 years ago
- Volatility plugins developed and maintained by the community☆21Updated 5 months ago
- IntelMQ Tutorial and Introductory Documentation☆14Updated 2 years ago
- Synapse: a Meta Alert Feeder for TheHive, a Security Incident Response Platform☆71Updated last year
- Imports Alienvault OTX pulses to a MISP instance☆52Updated 3 years ago
- An OpenTAXII Configuration for MISP☆81Updated 2 years ago
- Open source training materials for law-enforcement and organisations interested in DFIR.☆56Updated last month
- Definition, description and relationship types of MISP objects☆94Updated last week
- misp-cloud - Cloud-ready images of MISP☆72Updated 2 years ago
- Pulls IOCs from MISP and adds the to reference sets in QRadar☆33Updated last year
- Specifications used in the MISP project including MISP core format☆51Updated last month
- SOC Workflow App helps Security Analysts and Threat Hunters explore suspicious events, look into raw events arriving at the Elastic Stack…☆94Updated 2 years ago
- Incident response teams usually working on the offline data, collecting the evidence, then analyze the data☆44Updated 3 years ago
- Cyber Threat Intelligence Feeds☆65Updated 10 months ago
- A collection of typical false positive indicators☆55Updated 4 years ago
- ☆33Updated 4 years ago
- Miscelaneous Dockers☆46Updated 3 years ago
- InvestigationPlaybookSpec☆72Updated 7 years ago
- Repository of scripts/tools that may be useful in Security Operations Centres (SOC)☆54Updated 4 years ago
- Tool to extract indicators of compromise from security reports in PDF format☆71Updated 8 months ago
- CyCAT.org API back-end server including crawlers☆30Updated 2 years ago
- IntelMQ Manager is a graphical interface to manage configurations for IntelMQ framework.☆104Updated 8 months ago
- ☆34Updated 4 years ago
- A website and framework for testing NIDS detection☆57Updated 3 years ago