jonticknor / ElasticPhish
Proof-of-concept for phishing intelligence in Elastic
☆15Updated 5 years ago
Alternatives and similar repositories for ElasticPhish:
Users that are interested in ElasticPhish are comparing it to the libraries listed below
- Check IOC provided by a MISP instance on Suricata events☆17Updated 5 years ago
- Virustotal Data to Timesketch☆17Updated 6 years ago
- An extendable tool to extract and aggregate IoCs from threat feeds☆33Updated last year
- ☆24Updated 2 years ago
- The FastIR Server is a Web server to schedule FastIR Collector forensics collect thanks to the FastIR Agent☆12Updated 7 years ago
- ☆22Updated 4 years ago
- ☆14Updated 6 years ago
- FastIR Agent is a Windows service to execute FastIR Collector on demand☆14Updated 7 years ago
- HoneyDB Python Module☆13Updated last year
- The Fastest way to consume Threat Intel☆25Updated 2 years ago
- A list of IOCs applicable to PoshC2☆24Updated 4 years ago
- A Passive DNS backend and collector☆31Updated 2 years ago
- Triage automation for suspect URLs☆12Updated 5 years ago
- Cybersecurity Incidents Mind Maps☆33Updated 3 years ago
- Indicators of compromise relating to our report on APT10's targeting of global MSPs☆10Updated 7 years ago
- certstream + analytics☆10Updated 5 years ago
- CertWatcher is a new take on monitoring for phishing sites. It is meant to be a set and forget service that will send you a daily report …☆11Updated 4 years ago
- A mapping project between tags (annotations, labels) and domain names☆11Updated 10 months ago
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆16Updated 4 years ago
- Repository for scripts and tips for "Yara Scan Service"☆20Updated 2 years ago
- Python parser for Red Canary's Atomic Red Team Yamls☆27Updated 6 years ago
- Analytics for Accounting logs from Network devices☆17Updated 3 years ago
- A PowerShell script to prevent Sysmon from writing its events☆15Updated 4 years ago
- ☆12Updated 3 years ago
- The Purpose of this research tool is to provide a Python client into RiskIQ API services.☆22Updated 4 years ago
- Docker projects to retain beacon source IPs using C2 relaying infra☆11Updated 6 years ago
- A collection of threat intelligence data such as IOC, Yara and Snort/Suricata Rules etc.☆10Updated 5 years ago
- Notebooks created to attack and secure Active Directory environments☆27Updated 5 years ago
- Easy way to create a MISP event related to a Phishing page☆17Updated last year
- ☆12Updated 5 years ago