jctello / JCT-Wazuh
Tools for Wazuh by Juan C. Tello
☆14Updated 3 years ago
Alternatives and similar repositories for JCT-Wazuh:
Users that are interested in JCT-Wazuh are comparing it to the libraries listed below
- ☆19Updated 3 years ago
- Personal scripts☆13Updated 7 months ago
- ☆17Updated 3 years ago
- Wazuh integration TheHive☆35Updated 2 years ago
- ☆17Updated 2 years ago
- Repo for Automations and other solutions for Elastic SIEM/Security.☆18Updated 3 years ago
- Parse wazuh[HIDS] alerts into ECS mapping using Filebeat☆27Updated 4 years ago
- Convert Sigma rules to Wazuh rules☆64Updated last year
- Some resources to facilitate my blog on auditd for security monitoring☆12Updated 2 years ago
- ☆16Updated 3 years ago
- Our collection of Wazuh detection rules for our Offense Lab☆14Updated 3 years ago
- Osquery Packs we use for customer security hardening☆12Updated 7 months ago
- ☆34Updated last year
- (Unofficial) Wazuh integration to send alerts to IRIS.☆17Updated 4 months ago
- Leveraging MISP indicators via a pDNS-based infrastructure as a poor man’s SOC.☆51Updated 3 months ago
- Digital Forensic Analysis and Incident Response Playbooks to handle real world security incidents☆40Updated last year
- Sysmon and wazuh integration with Sigma sysmon rules [updated]☆65Updated 3 years ago
- A Sigma to Wazuh / OSSEC converter including a generated Windows Sysmon ruleset☆33Updated 4 years ago
- Kibana 7 Templates for Suricata IDPS Threat Hunting☆40Updated 2 years ago
- Custom Kibana dashboards to secure and monitor Microsoft 365.☆13Updated last year
- A Ruleset to enhance detection capabilities of Ossec using Sysmon☆92Updated 3 years ago
- Run Velociraptor on Security Onion☆37Updated 2 years ago
- Incident Response Plan for all major incidents including cheatsheets for both linux and windows☆14Updated 4 years ago
- Useful scripts for those administering Wazuh☆83Updated 3 months ago
- An experimental Velociraptor implementation using cloud infrastructure☆25Updated 3 weeks ago
- Wazuh - Splunk App☆53Updated 7 months ago
- Workflows for Shuffle☆21Updated 2 years ago
- ☆48Updated 2 weeks ago
- Integrate your Wazuh-Manager or Graylog with the SOCFortress Threat Intel Service☆29Updated 7 months ago
- Open-source powered SIEM, Vulnerability Scanning, Host- & Network-IDS. Built upon Elastic Stack, OpenVAS, Suricata. Wrapped in a Python F…☆15Updated 2 years ago