fmanco / osquery-packsLinks
osquery query packs
☆14Updated 7 years ago
Alternatives and similar repositories for osquery-packs
Users that are interested in osquery-packs are comparing it to the libraries listed below
Sorting:
- Cisco Orbital - Osquery queries by Talos☆135Updated last year
- Bro/Zeek integration with osquery☆94Updated 5 years ago
- misp-cloud - Cloud-ready images of MISP☆74Updated 3 years ago
- Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings☆122Updated 4 years ago
- SOC Workflow App helps Security Analysts and Threat Hunters explore suspicious events, look into raw events arriving at the Elastic Stack…☆94Updated 3 years ago
- Cyber Defence Monitoring Course Suite :: Suricata, Arkime (and others in the past)☆107Updated last year
- ☆143Updated this week
- 🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.☆267Updated 2 years ago
- Recon Hunt Queries☆79Updated 4 years ago
- Structured Threat Intelligence Graph☆97Updated last month
- Osquery Resources☆63Updated 6 years ago
- SIAC is an enterprise SIEM built on open-source technology.☆116Updated 7 years ago
- ☆18Updated 4 years ago
- Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing☆177Updated 4 years ago
- PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform☆149Updated 3 years ago
- defendA Data Lake. A firehose pipeline to athena providing enrichment and normalization for security events☆17Updated 2 years ago
- Import specific data sources into the Sigma generic and open signature format.☆79Updated 3 years ago
- Multithreaded threat Intelligence gathering built with Python3☆177Updated 7 years ago
- ☆37Updated 4 years ago
- Cerebrate is an open-source platform meant to act as a trusted contact information provider and interconnection orchestrator for other se…☆91Updated last month
- Wazuh - Splunk App☆56Updated last year
- ☆190Updated 3 weeks ago
- RPM packages for MISP☆38Updated this week
- Synapse: a Meta Alert Feeder for TheHive, a Security Incident Response Platform☆71Updated 2 years ago
- Documentation of Cortex☆175Updated 2 years ago
- Remote Memory Acquisition Tool☆251Updated 5 years ago
- ☆119Updated last month
- Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.☆109Updated 7 years ago
- A website and framework for testing NIDS detection☆57Updated 4 years ago
- Osquery Mangement Server☆114Updated 5 years ago