A feature extension to ease the automation of Threat Hunting with ElastAlert and the ELK Stack
☆14Jan 11, 2018Updated 8 years ago
Alternatives and similar repositories for ElastAlertGrouper
Users that are interested in ElastAlertGrouper are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This Script will walk you through creating elastalert rules☆11Dec 18, 2018Updated 7 years ago
- Universal remote system indexing River Plugin for Elasticsearch☆12Apr 17, 2018Updated 8 years ago
- Kibana 6 Templates for Suricata IDPS Threat Hunting☆24Mar 5, 2019Updated 7 years ago
- Analysis of file (doc, pdf, exe, ...) in deep (emmbedded file(s)) with clamscan and yara rules☆51Sep 6, 2023Updated 3 years ago
- An agent that performs user actions on a workstation☆13Jan 22, 2018Updated 8 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- nfsinkhole is a Python library and scripts for setting up a Linux server as a sinkhole (monitor, log/capture, and drop all traffic to a s…☆12Apr 8, 2017Updated 9 years ago
- Lambda job in Python to automatically deploy Inspector agent to newly-launched EC2 instances☆29Jan 14, 2026Updated 9 months ago
- A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns by leveraging Windows Events and Sys…☆11Apr 13, 2017Updated 9 years ago
- automatic enumeration and maintenance of Suricata monitoring interfaces☆12Dec 10, 2019Updated 6 years ago
- Python script for parsing ESET (NOD32) virlog.dat file.☆16Sep 28, 2017Updated 9 years ago
- CLI tool for testing Office documents with macros using MaliciousMacroBot☆12Dec 3, 2023Updated 2 years ago
- A lightweight MusicBrainz CLI in Go.☆12Mar 22, 2019Updated 7 years ago
- My logstash plugins. Filter: sig (for security detect -> IOC, sig, New value, Reference, link, frequence, ...). Output: alert created by …☆10Jul 26, 2019Updated 7 years ago
- ☆10Sep 10, 2026Updated 2 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Meer is a "spooler" for Suricata / Sagan.☆30Jun 21, 2023Updated 3 years ago
- Deep Security's APIs make it simple to integration with a variety of AWS Services☆18Apr 24, 2019Updated 7 years ago
- Feed for verious malicious IPs such as malware and botnets☆13Jun 20, 2016Updated 10 years ago
- Python client for the Thinkst Canary API☆21Jul 23, 2026Updated 3 months ago
- ☆13Updated this week
- Free RBoy Apps SmartApps and Device Handlers for SmartThings (more at www.rboyapps.com)☆18Sep 22, 2022Updated 4 years ago
- ☆11Jul 19, 2021Updated 5 years ago
- A PowerShell solution to discover visible SMB shares, test for access rights, inventory accessible files and flag human readable file con…☆29Mar 13, 2023Updated 3 years ago
- Argus is a system and network monitoring application☆14Jan 16, 2020Updated 6 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆12Apr 26, 2018Updated 8 years ago
- Manage cisco devices from puppet☆23May 28, 2014Updated 12 years ago
- Network timing evaluation used to detect beacons, works with argus flow as the source☆20May 4, 2016Updated 10 years ago
- ☆37Oct 21, 2026Updated 2 weeks ago
- Repo for Automations and other solutions for Elastic SIEM/Security.☆19Jun 15, 2021Updated 5 years ago
- Your Everyday Threat Intelligence☆22Mar 21, 2017Updated 9 years ago
- Simple python script to scan some weak things.☆14Nov 2, 2015Updated 11 years ago
- collection of bro and bash scripts that when run from the same directory on Linux distro with bro installed, will pull information such a…☆12Mar 29, 2016Updated 10 years ago
- Zeek Training Materials/Products☆47Updated this week
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Threat Detection & Anomaly Detection rules for popular open-source components☆53Jul 27, 2022Updated 4 years ago
- Argus: System + Network Monitoring☆19Feb 7, 2024Updated 2 years ago
- a bash script that will pull and back up the pfsense XML☆17Feb 21, 2021Updated 5 years ago
- Minimalistic WebUI for passiveDNS tool☆18May 6, 2021Updated 5 years ago
- Parse wazuh[HIDS] alerts into ECS mapping using Filebeat☆29Jul 21, 2020Updated 6 years ago
- Hakabana monitoring tool using Haka, ElastcSearch and Kibana☆20Sep 24, 2014Updated 12 years ago
- Olger, authomated cybersecurity analyst , check infrastructures and deploy solutions☆15Feb 15, 2023Updated 3 years ago
Are these results useful?