joelwking / Phantom-Cyber
Apps for Splunk Phantom security automation | Cisco Meraki | Ansible Tower | F5 | A10
☆25Updated 4 years ago
Alternatives and similar repositories for Phantom-Cyber:
Users that are interested in Phantom-Cyber are comparing it to the libraries listed below
- This is a script module for Bro that encapsulates and detects activity related to the Mandiant APT1 report.☆47Updated 10 years ago
- Bro IDS + ELK Stack to detect and block data exfiltration☆47Updated 6 years ago
- Network Forensics Bro scripts & pcap samples☆62Updated 10 years ago
- Bro-IDS scripts☆50Updated 8 years ago
- Bro/Zeek integration with osquery☆94Updated 4 years ago
- ☆36Updated 4 years ago
- ☆38Updated 6 years ago
- Basic Anomaly IDS capabilities with Python and Bro☆105Updated 6 years ago
- Check_ioc is a script to check for various, selectable indicators of compromise on Windows systems via PowerShell and Event Logs. It was …☆76Updated 7 years ago
- Dockerfiles for NSM tools☆84Updated 7 years ago
- ☆72Updated 3 years ago
- Security Onion Elastic Stack☆46Updated 3 years ago
- ☆36Updated 8 years ago
- Bringing DevOps to Forensics☆34Updated 9 years ago
- InvestigationPlaybookSpec☆72Updated 7 years ago
- Cyber Analytics Platform and Examination System (CAPES) Project Page☆60Updated 5 years ago
- **BETA** A simple buildscript for network security monitoring on RHEL/CentOS☆31Updated 7 years ago
- Scripts for Bro IDS and ELK Stack☆56Updated 9 years ago
- STIX Tools & Scripts☆47Updated 11 years ago
- Beholder is a shell script which installs and configures essentials to peer into your network activity.☆19Updated 7 years ago
- Bro scripts to be shared with the community☆109Updated 11 years ago
- Bro scripts for the ROCK platform. http://rocknsm.io☆33Updated last year
- Threat Intelligence distribution☆30Updated 9 years ago
- irCRpull is a PowerShell script utilized to pull several system artifacts, utilizing the free tool CrowdResponse, from a live Win7+ syste…☆13Updated 9 years ago
- Ansible playbook to install Malware Information Sharing Platform (MISP)☆17Updated 9 years ago
- ☆55Updated 2 years ago
- WebUI of MineMeld☆43Updated last year
- Harbinger Threat Intelligence☆82Updated 9 years ago
- setup zeek, previously Bro IDS☆17Updated 2 months ago
- Queries to parse sysmon event log file with microsoft logparser☆56Updated 9 years ago