j91321 / MISP2memcachedLinks
Load MISP events into memcached for log enrichment using logstash
☆12Updated 4 years ago
Alternatives and similar repositories for MISP2memcached
Users that are interested in MISP2memcached are comparing it to the libraries listed below
Sorting:
- Threat intelligence and threat detection indicators (IOC, IOA)☆52Updated 4 years ago
- Automated detection rule analysis utility☆29Updated 2 years ago
- A list of Mitre Caldera compatible emulation-plans☆14Updated 4 years ago
- Yara Based Detection Engine for web browsers☆49Updated 3 years ago
- Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.☆76Updated 3 years ago
- ☆35Updated 8 months ago
- A repository hosting example goodware evtx logs containing sample software installation and basic user interaction☆79Updated last month
- Import specific data sources into the Sigma generic and open signature format.☆78Updated 3 years ago
- A Splunk Technology Add-on to forward filtered ETW events.☆30Updated 4 years ago
- Small-scale threat emulation and detection range built on Elastic and Atomic Redteam.☆38Updated last year
- Random hunting ordiented yara rules☆97Updated 2 years ago
- Extract BITS jobs from QMGR queue and store them as CSV records☆75Updated 4 months ago
- Simple yara rule manager☆66Updated 2 years ago
- A library for fast parse & import of Windows Eventlogs into Elasticsearch.☆85Updated this week
- CyCAT.org API back-end server including crawlers☆29Updated 2 years ago
- Scripts to integrate DFIR-IRIS, MISP and TimeSketch☆34Updated 3 years ago
- Community modules for FAME☆65Updated 4 months ago
- A repository of Sysmon For Linux configuration modules☆15Updated 3 years ago
- Repository with Sample threat hunting notebooks on Security Event Log Data Sources☆64Updated 2 years ago
- Actionable analytics designed to combat threats based on MITRE's ATT&CK.☆22Updated 5 years ago
- A YARA Rule Performance Measurement Tool☆59Updated last year
- My conference presentations☆66Updated last year
- YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA☆104Updated last month
- S2AN - Mapper of Sigma/Suricata Rules/Signatures ➡️ MITRE ATT&CK Navigator☆87Updated 2 years ago
- Automatic detection engineering technical state compliance☆55Updated 11 months ago
- Repository for SPEED SIEM Use Case Framework☆55Updated 5 years ago
- Detect possible sysmon logging bypasses given a specific configuration☆111Updated 6 years ago
- This repository was created to aid in the deployment/maintenance of the Sysmon service on a large number of computers.☆82Updated 2 years ago
- Repository with selected IOCs and YARA rules for threat hunting.☆35Updated last month
- A collection of useful PowerShell tools to collect, organize, and visualize Sysmon event data☆39Updated 5 years ago