jmbmxer / CloudSocLinks
Push-button Security Operations Center using Kubernetes
☆12Updated 8 years ago
Alternatives and similar repositories for CloudSoc
Users that are interested in CloudSoc are comparing it to the libraries listed below
Sorting:
- Exports MISP events to STIX and ingest into McAfee ESM☆15Updated 5 years ago
- Security Onion Elastic Stack☆46Updated 4 years ago
- Threat hunting repo for my independent study on threat hunting with OSQuery☆27Updated 7 years ago
- Python module for evaluation of AWS account best practices around incident handling readieness.☆55Updated 5 years ago
- Build Automated Machine Images for MISP☆28Updated 2 years ago
- Slides and Other Resources from my latest Talks and Presentations☆24Updated 4 years ago
- A packer utility to create and capture DFIR Image for use AWS & Azure☆15Updated 5 years ago
- ansible role to setup MISP, Malware Information Sharing Platform & Threat Sharing☆54Updated 2 weeks ago
- A simple Docker container that serves the MITRE ATT&CK Navigator web app☆27Updated 2 years ago
- Core incident handling plugins for aws_ir cli, incident pony, and more.☆21Updated 6 years ago
- threat-intelligence.eu website and repository of information about open standards, documents, methodologies and processes in threat intel…☆48Updated 2 years ago
- This package allows for creating alerts in The Hive from emails retrieved from a Microsoft Exchange mailbox.☆12Updated 7 years ago
- Elasticsearch/Kibana environment and log data for Sigma workshop☆27Updated 5 years ago
- ☆34Updated 4 years ago
- This project is no longer maintained. There's a successor at https://github.com/zeek-packages/zeek-agent-v2☆14Updated 4 years ago
- ☆20Updated 5 years ago
- Materials for the BSides NoVA/Charleston 2018 Bro Workshop☆14Updated 3 weeks ago
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆16Updated 4 years ago
- Subscriptions to collect Windows Event Logs mapped to the MITRE ATT&CK model☆12Updated 4 years ago
- Web based analysis platform for use with the AWS_IR command line tool.☆17Updated 8 years ago
- Security Operations Center Multiple Purpose Tool, takes IP address input, conducts OSINT, conducts splunk, bro, fireeye, imperva, and fir…☆21Updated 8 years ago
- Traceroute improved wrapper for CSIRT and CERT operators☆38Updated 8 months ago
- A few quick recipes for those that do not have much time during the day☆22Updated 7 months ago
- Integrating Sysinternals Autoruns’ logs into Security Onion☆31Updated last year
- AWS EKS Cluster Forensics☆23Updated 3 years ago
- ☆24Updated 5 years ago
- ☆30Updated 6 years ago
- Actionable analytics designed to combat threats based on MITRE's ATT&CK.☆22Updated 5 years ago
- Indices for courses in SANS' Network Security Operations curriculum☆16Updated 9 years ago
- ☆55Updated 3 years ago