Alternatives and similar repositories for Splunk-ESIntel-KVStore:

Users that are interested in Splunk-ESIntel-KVStore are comparing it to the libraries listed below

• rkovar / splunk-hunting-helpers
  ☆55Updated 3 years ago
• MattUebel / splunk_UF_hardening
  scripts to configure the Splunk Universal Forwarder in a locked down state
  ☆40Updated 6 years ago
• hire-vladimir / SA-NetOps
  Allows for MAC address to vendor mapping in Splunk
  ☆16Updated last year
• vmware-archive / cb-reporting
  Report Generation from the Carbon Black REST API
  ☆15Updated 3 years ago
• MHaggis / sysmon-splunk-app
  Sysmon Splunk App
  ☆46Updated 6 years ago
• Foundstone / InvestigationPlaybookSpec
  InvestigationPlaybookSpec
  ☆72Updated 7 years ago
• eCrimeLabs / MISP2CbR
  Utilizing your Threat data from a MISP instance into CarbonBlack Response by exposing the data in the Threat Intelligence Feed.
  ☆19Updated 2 years ago
• SplunkSec / .conf2015
  Splunk app to support presentation at .conf2015 on free security tools and Splunk
  ☆10Updated 9 years ago
• SMAPPER / NXLog-AutoConfig
  ☆49Updated 4 years ago
• georgestarcher / Splunk-Alert
  Example Splunk Alert Scripts
  ☆20Updated 10 years ago
• apger / SA-RBA
  Risk Based Alerting Supporting Add-On (SA) for Splunk
  ☆45Updated 3 years ago
• aboutsecurity / Bro-samples
  Network Forensics Bro scripts & pcap samples
  ☆62Updated 11 years ago
• UNIT777 / Email2TheHive
  This package allows for creating alerts in The Hive from emails retrieved from a Microsoft Exchange mailbox.
  ☆12Updated 7 years ago
• P1llus / ArcSight-Rest
  Python library for the ArcSight logger REST API
  ☆27Updated 3 years ago
• carbonblack / cbfeeds
  Carbon Black Feeds
  ☆72Updated 2 years ago
• z3ndrag0n / forensicator-fate
  Bringing DevOps to Forensics
  ☆34Updated 10 years ago
• vi-or-die / TheHive4PS
  Powershell Functions to interact with TheHive-Project
  ☆10Updated 5 years ago
• sooshie / scrape_pdf
  Python script to pull various IOCs from PDFs
  ☆15Updated 10 years ago
• carbonblack / community
  Community Sharing Repository for Carbon Black and Bit9 Platforms
  ☆27Updated 3 years ago
• hosom / bro-otx
  Integrate Zeek with Alienvault OTX
  ☆25Updated 4 years ago
• teamdfir / volatility-plugins-community
  Volatility plugins developed and maintained by the community
  ☆21Updated 6 months ago
• SecurityNik / QRadar---Threat-Intelligence-On-The-Cheap
  Download a list of suspected malicious IPs and Domains. Create a QRadar Reference Set. Search Your Environment For Malicious IPs
  ☆68Updated 3 years ago
• paulpc / nyx
  Threat Intelligence distribution
  ☆30Updated 9 years ago
• gcrahay / otx_misp
  Imports Alienvault OTX pulses to a MISP instance
  ☆52Updated 3 years ago
• thnyheim / misp2bro
  Python script that gets IOC from MISP and converts it into BRO intel files.
  ☆13Updated 8 years ago
• harvard-itsecurity / qradar-seculert-push
  Push "BAD" IPs/Networks into QRadar's "Remote Networks", tag them properly, and use them!
  ☆18Updated 11 years ago
• jorritfolmer / TA-dmarc
  Add-on for ingesting DMARC aggregate reports into Splunk
  ☆15Updated 2 years ago
• dstaulcu / TA-Sigma-Searches
  A Splunk app with saved reports derived from Sigma rules
  ☆73Updated 6 years ago
• chaoticmachinery / frac_rift
  FRAC and RIFT
  ☆17Updated 6 years ago
• carbonblack / cb-yara-connector
  Analyze binaries collected in VMware Carbon Black EDR against Yara rules.
  ☆37Updated 2 years ago