fireeye / HXTool
HXTool is an extended user interface for the FireEye HX Endpoint product. HXTool can be installed on a dedicated server or on your physical workstation. HXTool provides additional features and capabilities over the standard FireEye HX web user interface. HXTool uses the fully documented REST API that comes with the FireEye HX for communication w…
☆79Updated 4 months ago
Related projects ⓘ
Alternatives and complementary repositories for HXTool
- ☆61Updated last month
- Extract BITS jobs from QMGR queue and store them as CSV records☆74Updated 4 months ago
- Digital Forensics Artifacts Knowledge Base☆75Updated 5 months ago
- Blueteam operational triage registry hunting/forensic tool.☆142Updated last year
- Random hunting ordiented yara rules☆95Updated last year
- attack2jira automates the process of standing up a Jira environment that can be used to track and measure ATT&CK coverage☆111Updated last year
- My conference presentations☆66Updated last year
- Sigma Detection Rule Repository☆85Updated 4 years ago
- Collection of useful, up to date, Carbon Black Response Queries☆83Updated 4 years ago
- ATT&CK Remote Threat Hunting Incident Response☆198Updated 5 years ago
- Automagically extract forensic timeline from volatile memory dump☆123Updated 6 months ago
- ☆49Updated last year
- ☆77Updated 5 years ago
- evtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files.☆146Updated 2 years ago
- Script for parsing Symantec Endpoint Protection logs, VBNs, and ccSubSDK database.☆63Updated last year
- Stand-alone parser for User Access Logging from Server 2012 and newer systems☆71Updated 10 months ago
- A community event for security researchers to share their favorite notebooks☆106Updated 8 months ago
- A PowerShell incident response script for quick triage☆75Updated 2 years ago
- Collection of scripts provided for public use☆31Updated 3 weeks ago
- Cloud Templates and scripts to deploy mordor environments☆127Updated 3 years ago
- Python library for threat intelligence☆79Updated 4 months ago
- A Splunk App containing Sigma detection rules, which can be updated from a Git repository.☆107Updated 4 years ago
- Collection of walkthroughs on various threat hunting techniques☆75Updated 4 years ago
- Provides detection capabilities and log conversion to evtx or syslog capabilities☆52Updated 2 years ago
- ☆31Updated 3 weeks ago
- Active Directory Purple Team Playbook☆104Updated last year
- Full of public notes and Utilities☆82Updated 2 months ago
- ☆1Updated 2 weeks ago
- A repository hosting example goodware evtx logs containing sample software installation and basic user interaction☆68Updated 11 months ago
- YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA☆98Updated 2 months ago