A feature extension to ease the automation of Threat Hunting with ElastAlert and the ELK Stack
☆14Jan 11, 2018Updated 8 years ago
Alternatives and similar repositories for ElastAlertGrouper
Users that are interested in ElastAlertGrouper are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns by leveraging Windows Events and Sys…☆11Apr 13, 2017Updated 9 years ago
- Kibana 6 Templates for Suricata IDPS Threat Hunting☆24Mar 5, 2019Updated 7 years ago
- Analysis of file (doc, pdf, exe, ...) in deep (emmbedded file(s)) with clamscan and yara rules☆51Sep 6, 2023Updated 3 years ago
- Python script for parsing ESET (NOD32) virlog.dat file.☆16Sep 28, 2017Updated 9 years ago
- CLI tool for testing Office documents with macros using MaliciousMacroBot☆12Dec 3, 2023Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A lightweight MusicBrainz CLI in Go.☆11Mar 22, 2019Updated 7 years ago
- nfsinkhole is a Python library and scripts for setting up a Linux server as a sinkhole (monitor, log/capture, and drop all traffic to a s…☆12Apr 8, 2017Updated 9 years ago
- Meer is a "spooler" for Suricata / Sagan.☆30Jun 21, 2023Updated 3 years ago
- automatic enumeration and maintenance of Suricata monitoring interfaces☆12Dec 10, 2019Updated 6 years ago
- My logstash plugins. Filter: sig (for security detect -> IOC, sig, New value, Reference, link, frequence, ...). Output: alert created by …☆10Jul 26, 2019Updated 7 years ago
- Graphical analysis of PDF structure.☆13Jan 9, 2017Updated 9 years ago
- ☆10Sep 10, 2026Updated last month
- A PowerShell solution to discover visible SMB shares, test for access rights, inventory accessible files and flag human readable file con…☆28Mar 13, 2023Updated 3 years ago
- Deep Security's APIs make it simple to integration with a variety of AWS Services☆18Apr 24, 2019Updated 7 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- ☆15Oct 13, 2026Updated last week
- Feed for verious malicious IPs such as malware and botnets☆13Jun 20, 2016Updated 10 years ago
- Network timing evaluation used to detect beacons, works with argus flow as the source☆20May 4, 2016Updated 10 years ago
- ☆12Apr 26, 2018Updated 8 years ago
- ☆11Jul 19, 2021Updated 5 years ago
- Argus is a system and network monitoring application☆14Jan 16, 2020Updated 6 years ago
- ☆37Updated this week
- Zeek Training Materials/Products☆47Updated this week
- Free RBoy Apps SmartApps and Device Handlers for SmartThings (more at www.rboyapps.com)☆18Sep 22, 2022Updated 4 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Argus: System + Network Monitoring☆19Feb 7, 2024Updated 2 years ago
- Manage cisco devices from puppet☆23May 28, 2014Updated 12 years ago
- Advanced Phishing Protection: Suricata rulesets open and free☆42Updated this week
- This is a set of extractors for use within Graylog, to parse the output of Pfsense filter logs.☆14Sep 14, 2020Updated 6 years ago
- Hakabana monitoring tool using Haka, ElastcSearch and Kibana☆20Sep 24, 2014Updated 12 years ago
- Parse wazuh[HIDS] alerts into ECS mapping using Filebeat☆28Jul 21, 2020Updated 6 years ago
- Olger, authomated cybersecurity analyst , check infrastructures and deploy solutions☆15Feb 15, 2023Updated 3 years ago
- a bash script that will pull and back up the pfsense XML☆17Feb 21, 2021Updated 5 years ago
- collection of bro and bash scripts that when run from the same directory on Linux distro with bro installed, will pull information such a…☆12Mar 29, 2016Updated 10 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- An HTTP client library aiming to perform a large number of requests on a server as fast as it can take them, but without distrupting oper…☆16Jul 11, 2025Updated last year
- Repo for Automations and other solutions for Elastic SIEM/Security.☆18Jun 15, 2021Updated 5 years ago
- A collection of utilities to help with analysis on the command line.☆18Aug 9, 2024Updated 2 years ago
- Threat Detection & Anomaly Detection rules for popular open-source components☆53Jul 27, 2022Updated 4 years ago
- Minimalistic WebUI for passiveDNS tool☆18May 6, 2021Updated 5 years ago
- Lambda job in Python to automatically deploy Inspector agent to newly-launched EC2 instances☆29Jan 14, 2026Updated 9 months ago
- ☆16Aug 30, 2017Updated 9 years ago