Alternatives and similar repositories for go-qradar:

Users that are interested in go-qradar are comparing it to the libraries listed below

• IBM / api-samples
  Samples code that uses QRadar API's
  ☆199Updated 4 years ago
• capesstack / capes
  Cyber Analytics Platform and Examination System (CAPES) Project Page
  ☆60Updated 5 years ago
• ibm-security-intelligence / visualizations
  Samples of visualization add-ons to QRadar, utilizing public REST APIs
  ☆34Updated 8 years ago
• MHaggis / sysmon-splunk-app
  Sysmon Splunk App
  ☆46Updated 6 years ago
• IBM / qpylib
  Python utility functions for QRadar
  ☆31Updated 5 months ago
• TheHive-Project / Hippocampe
  Threat Feed Aggregation, Made Easy
  ☆167Updated 4 years ago
• carbonblack / cbapi-python
  Carbon Black API - Python language bindings
  ☆146Updated 5 months ago
• harvard-itsecurity / qradar-seculert-push
  Push "BAD" IPs/Networks into QRadar's "Remote Networks", tag them properly, and use them!
  ☆18Updated 11 years ago
• TheHive-Project / CortexDocs
  Documentation of Cortex
  ☆172Updated last year
• josh-morin / qradar
  Unofficial third-party scripts, playbooks, and content for IBM QRadar & QRadar Community Edition.
  ☆80Updated 6 months ago
• SMAPPER / NXLog-AutoConfig
  ☆48Updated 4 years ago
• carbonblack / cb-event-forwarder
  Subscribe to raw VMware Carbon Black EDR event feed and forward to another system, such as Splunk.
  ☆73Updated 9 months ago
• SparkITSolutions / phoenix
  Cuckoo Sandbox is an automated dynamic malware analysis system
  ☆107Updated 4 years ago
• IBM / data-import
  ☆48Updated 9 years ago
• ccdcoe / CDMCS
  Cyber Defence Monitoring Course Suite :: Suricata, Arkime (and others in the past)
  ☆102Updated 8 months ago
• MHaggis / CBR-Queries
  Collection of useful, up to date, Carbon Black Response Queries
  ☆83Updated 4 years ago
• splunk / SA-ctf_scoreboard_admin
  ☆18Updated 3 years ago
• P4T12ICK / Sigma2SplunkAlert
  Converts Sigma detection rules to a Splunk alert configuration.
  ☆109Updated 4 years ago
• TheHive-Project / Cortex4py
  Python API Client for Cortex
  ☆32Updated 2 years ago
• rkovar / splunk-hunting-helpers
  ☆55Updated 2 years ago
• pan-unit42 / playbook_viewer
  ☆169Updated 7 months ago
• sans-blue-team / freq.py
  Mark Baggett's (@MarkBaggett - GSE #15, SANS SEC573 Author) tool for detecting randomness using NLP techniques rather than pure entropy c…
  ☆125Updated 2 years ago
• TheHive-Project / Synapse
  Synapse: a Meta Alert Feeder for TheHive, a Security Incident Response Platform
  ☆71Updated last year
• Foundstone / InvestigationPlaybookSpec
  InvestigationPlaybookSpec
  ☆72Updated 7 years ago
• carbonblack / cbfeeds
  Carbon Black Feeds
  ☆72Updated last year
• Security-Onion-Solutions / securityonion-elastic
  Security Onion Elastic Stack
  ☆46Updated 4 years ago
• OTRF / notebooks-forge
  A collection of notebooks built for defensive and offensive operations.
  ☆77Updated 4 years ago
• Nclose-ZA / elastalert_hive_alerter
  This package allows the use of a custom Elastalert Alert which creates alerts with observables in TheHive using TheHive4Py.
  ☆27Updated 3 years ago
• MISP / docker-misp
  Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing
  ☆105Updated last year
• remg427 / misp42splunk
  A Splunk app to use MISP in background
  ☆109Updated last week