k-sec-tools / ExchangeFilterLinks
☆20Updated 3 years ago
Alternatives and similar repositories for ExchangeFilter
Users that are interested in ExchangeFilter are comparing it to the libraries listed below
Sorting:
- Enterprise Response Model & Common Knowledge☆37Updated 2 weeks ago
- Chrome extension for SOC automations☆36Updated last month
- MP SIEM SDK☆26Updated 5 months ago
- ☆67Updated 4 years ago
- Powershell Event Tracing Toolbox☆76Updated 3 years ago
- A repository with data about APTs☆13Updated 2 years ago
- реп полезностей для PT MaxPatrol SIEM☆24Updated last year
- Anything Sysmon related from the MSTIC R&D team☆154Updated last year
- Harvest Linux forensic data for operational triage of an event.☆51Updated last year
- Sysmon EDR POC Build within Powershell to prove ability.☆225Updated 4 years ago
- Sysmon and wazuh integration with Sigma sysmon rules [updated]☆67Updated 3 years ago
- An implementation of a Windows Event Collector server running on GNU/Linux.☆75Updated this week
- System of Orchestration, Lifecycle control, Detection and Response☆60Updated last year
- Detection of Log4j in memory☆40Updated 3 years ago
- Specific guidance and configuration scripts based on Microsoft-recommended security configuration baselines for Windows.☆13Updated 4 years ago
- evtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files.☆154Updated 3 years ago
- Utility that converts an .etl file containing a Windows network packet capture into .pcapng format.☆46Updated 5 years ago
- A collection of useful PowerShell tools to collect, organize, and visualize Sysmon event data☆39Updated 5 years ago
- ☆39Updated 2 years ago
- A script to collect (the most famous) Yara rules from more than 150 free resources. Free alternative to: https://valhalla.nextron-system…☆27Updated last year
- Incident Response Network Tools☆24Updated 3 years ago
- Kerberos Haters Guide to Zeek Threat Hunting☆28Updated 3 years ago
- Powershell module for VMWare vSphere forensics☆153Updated 8 months ago
- Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…☆74Updated 3 weeks ago
- Setting up a Windows Event Collector☆11Updated last year
- HXTool is an extended user interface for the FireEye HX Endpoint product. HXTool can be installed on a dedicated server or on your physic…☆83Updated last year
- Blueteam operational triage registry hunting/forensic tool.☆148Updated 2 years ago
- Pushes Sysmon Configs☆88Updated 4 years ago
- Provides an advanced input.conf file for Windows and 3rd party related software with more than 70 different event log mapped to the MITRE…☆91Updated 2 weeks ago
- A repository hosting example goodware evtx logs containing sample software installation and basic user interaction☆79Updated 2 months ago