Alternatives and similar repositories for resilient-python-api

Users that are interested in resilient-python-api are comparing it to the libraries listed below

• ibmresilient / resilient-scripts
  Example scripts and rules for use in Resilient playbooks.
  ☆35Updated last year
• ibmresilient / resilient-community-apps
  Source code for IBM SOAR Apps that are available on our App Exchange
  ☆92Updated 2 weeks ago
• josh-morin / qradar
  Unofficial third-party scripts, playbooks, and content for IBM QRadar & QRadar Community Edition.
  ☆82Updated 3 months ago
• ibmresilient / resilient-reference
  Developer documentation for Resilient APIs
  ☆24Updated 7 months ago
• TheIRGurus / Playbooks
  Playbooks designed for IBM SOAR developed by The IR Gurus. These playbooks can be used to demonstrate how to design playbooks, perform au…
  ☆15Updated last year
• IBM / IBM-QRadar-Universal-Cloud-REST-API
  These workflows are provided for sample usage, new submissions and updates from the community, and are NOT supported by IBM.
  ☆51Updated last month
• guardsight / gsvsoc_cirt-playbook-battle-cards
  Cyber Incident Response Team Playbook Battle Cards
  ☆385Updated last year
• dlcowen / sansfor509
  Public script from SANS FOR509 Enterprise Cloud Incident Response
  ☆205Updated 10 months ago
• inodee / threathunting-spl
  Splunk code (SPL) for serious threat hunters and detection engineers.
  ☆287Updated last year
• activecm / threat-tools
  Tools for simulating threats
  ☆191Updated last year
• shauntdergrigorian / splunkqueries
  A list of Splunk queries that I've collected and used over time.
  ☆85Updated 4 years ago
• jjfallete / resilient
  Resilient Automation Functions and Scripts
  ☆15Updated 3 years ago
• corelight / zeek-cheatsheets
  Zeek Log Cheatsheets
  ☆295Updated last week
• 3CORESec / SIEGMA
  SIEGMA - Transform Sigma rules into SIEM consumables
  ☆153Updated 5 months ago
• coolacid / docker-misp
  A (nearly) production ready Dockered MISP
  ☆232Updated last year
• Xboarder56 / QRCE-Rules
  These are open source rules that can be utilized with QRadar to detect various types of threats in the environment.
  ☆55Updated 6 years ago
• archanchoudhury / Detection-Rule-Dump
  This is the One Stop place where you can several Detection Rules which can help you to kick start your journey on SIEM, SOC work.
  ☆39Updated 4 years ago
• splunk / botsv2
  Splunk Boss of the SOC version 2 dataset.
  ☆387Updated 2 years ago
• dhoelzer / ShowMeThePackets
  Useful network monitoring, analysis, and active response tools used or mentioned in the SANS SEC503 course (https://www.sans.org/course/i…
  ☆233Updated 7 months ago
• pe3zx / crowdstrike-falcon-queries
  A collection of Splunk's Search Processing Language (SPL) for Threat Hunting with CrowdStrike Falcon
  ☆208Updated 5 years ago
• MarkBaggett / freq
  This is a repository for freq.py and freq_server.py
  ☆210Updated 5 years ago
• ancailliau / sans-indexes
  Indexes for SANS Courses and GIAC Certifications
  ☆254Updated last year
• TheHive-Project / TheHive4py
  Python API Client for TheHive
  ☆232Updated last week
• center-for-threat-informed-defense / attack-control-framework-mappings
  🚨ATTENTION🚨 The NIST 800-53 mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept…
  ☆494Updated last year
• splunk / botsv3
  Splunk Boss of the SOC version 3 dataset.
  ☆359Updated 5 years ago
• MISP / x_old_misp_docker
  MISP Docker (XME edition)
  ☆282Updated last year
• SoulSec / resource-threat-hunting
  Repository resource for threat hunter
  ☆158Updated 6 years ago
• joshlemon / DFIR-Reference-Frameworks
  Repository of public reference frameworks for the DFIR community.
  ☆116Updated 2 years ago
• SigmaHQ / pySigma
  Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)
  ☆477Updated this week
• splunk / botsv1
  ☆410Updated last year