juaromu / wazuh
☆19Updated 3 years ago
Alternatives and similar repositories for wazuh:
Users that are interested in wazuh are comparing it to the libraries listed below
- Personal scripts☆13Updated 7 months ago
- ☆16Updated 3 years ago
- Convert Sigma rules to Wazuh rules☆64Updated 11 months ago
- Digital Forensic Analysis and Incident Response Playbooks to handle real world security incidents☆40Updated 11 months ago
- Sysmon and wazuh integration with Sigma sysmon rules [updated]☆64Updated 3 years ago
- Endpoint detection for remote hosts for consumption by RITA and Elasticsearch☆70Updated last year
- TheHiveIRPlaybook is a collection of TheHive case templates used for Incident Response☆13Updated 4 years ago
- ☆15Updated 2 years ago
- A Sigma to Wazuh / OSSEC converter including a generated Windows Sysmon ruleset☆33Updated 4 years ago
- Threat Detection & Anomaly Detection rules for popular open-source components☆51Updated 2 years ago
- Library of threat hunts to get any user started!☆44Updated 4 years ago
- Repo for Automations and other solutions for Elastic SIEM/Security.☆18Updated 3 years ago
- Open-source Fabric templates for cybersecurity and compliance☆16Updated 3 months ago
- A collection of tips for using MISP.☆74Updated 4 months ago
- ☆53Updated this week
- SkillAegis is a platform to design, run, and monitor exercise scenarios, enhancing skills in applications like MISP and training users in…☆26Updated last month
- Sigma detection rules for hunting with the threathunting-keywords project☆55Updated last month
- A MITRE ATT&CK Lookup Tool☆45Updated 11 months ago
- A collection of Sigma rules organized by MITRE ATT&CK technique☆17Updated 3 years ago
- Sharing Threat Hunting runbooks☆25Updated 5 years ago
- Run Velociraptor on Security Onion☆37Updated 2 years ago
- ☆33Updated last year
- Helping Incident Responders hunt for potential persistence mechanisms on UNIX-based systems.☆15Updated last year
- Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise☆61Updated 11 months ago
- Collection of Dashboards for Threat Hunting and more!☆67Updated 4 years ago
- This repository contains Splunk queries to hunt some anomalies☆41Updated 2 years ago
- Terraform scripts for deploying OpenCTI to AWS, Azure, and GCP☆31Updated last year
- pySigma Splunk backend☆37Updated last month
- Incident Response Network Tools☆24Updated 3 years ago
- Tools for Wazuh by Juan C. Tello☆14Updated 3 years ago