invictus-ir / aws_dataset
A dataset with CloudTrail events from an attack simulation using Stratus.
☆19Updated last year
Alternatives and similar repositories for aws_dataset:
Users that are interested in aws_dataset are comparing it to the libraries listed below
- A cheatsheet containing AWS CloudTrail events that can be used for Incident Response purposes or Detection Engineering.☆65Updated 8 months ago
- ALFA stands for Automated Audit Log Forensic Analysis for Google Workspace. You can use this tool to acquire all Google Workspace audit l…☆154Updated last month
- Summiting the Pyramid is a research project focused on engineering cyber analytics to make adversary evasion more difficult. The research…☆35Updated last month
- A dataset containing Office 365 Unified Audit Logs for security research and detection☆49Updated 2 years ago
- ☆93Updated 2 years ago
- This repository contains the research and components of our research into using Sigma for AWS Incident Response.☆27Updated last year
- This directory features proven systems that demonstrate value to your threat-informed efforts using metrics.☆108Updated 2 months ago
- A browser extension for threat hunting that provides one UI for different SIEMs/EDRs and simplifies investigation☆75Updated 8 months ago
- ☆42Updated 2 years ago
- ☆36Updated last month
- MISP to Sentinel integration☆62Updated 2 months ago
- A tool that allows you to document and assess any security automation in your SOC☆45Updated 3 months ago
- SentinelOne STAR Rules☆54Updated last year
- Slides of my public talks☆49Updated last year
- Collects a listing of MITRE ATT&CK Techniques, then discovers Splunk ESCU detections for each technique☆65Updated 10 months ago
- Public script from SANS FOR509 Enterprise Cloud Incident Response☆188Updated 4 months ago
- Anvilogic Forge☆89Updated last week
- Open Threat-Informed Detection Engineering☆32Updated 3 weeks ago
- A collection of various SIEM rules relating to malware family groups.☆65Updated 7 months ago
- MITRE ATT&CK mapped queries for SentinelOne Deep Visiblity☆88Updated 4 years ago
- Sample evtx files to use for testing hayabusa detection rules☆45Updated 2 months ago
- Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise☆60Updated 9 months ago
- Memory Forensic System on Cloud☆87Updated last year
- Sigma Queries turned into KQL for Defender using pysigma☆9Updated 7 months ago
- Cloud Analytics helps defenders detect attacks to their cloud infrastructure by developing behavioral analytics for cloud platforms as we…☆52Updated last year
- A repository to share publicly available Velociraptor detection content☆124Updated this week
- This guide describes a process for developing Cyber Threat Intelligence Priority Intelligence Requirements☆115Updated last year
- Cyber Defence related kusto queries for use in Azure Sentinel and Defender advanced hunting☆61Updated 3 weeks ago
- An opensource sigma conversion tool built using pysigma☆113Updated last month
- ☆34Updated last month