kamushadenes / cefevent
ArcSight's Common Event Format library
☆37Updated last year
Related projects ⓘ
Alternatives and complementary repositories for cefevent
- Integrate Zeek with Alienvault OTX☆25Updated 4 years ago
- SOC Workflow App helps Security Analysts and Threat Hunters explore suspicious events, look into raw events arriving at the Elastic Stack…☆92Updated 2 years ago
- Python library for the ArcSight logger REST API☆27Updated 3 years ago
- WebUI of MineMeld☆43Updated last year
- A website and framework for testing NIDS detection☆56Updated 3 years ago
- A collection of notebooks built for defensive and offensive operations.☆76Updated 4 years ago
- A utility repo to assist with converting between MISP and STIX formats☆64Updated 3 years ago
- ☆34Updated 3 years ago
- Synapse: a Meta Alert Feeder for TheHive, a Security Incident Response Platform☆71Updated last year
- Cyber Defence Monitoring Course Suite :: Suricata, Arkime (and others in the past)☆100Updated 5 months ago
- Bro scripts for the ROCK platform. http://rocknsm.io☆33Updated last year
- Provides detection capabilities and log conversion to evtx or syslog capabilities☆52Updated 2 years ago
- Bro script package to create JSON formatted logs to stream into data analysis systems.☆28Updated 11 months ago
- automate your MISP installs☆66Updated 4 years ago
- Expert Investigation Guides☆50Updated 3 years ago
- Threat Hunting with ELK Workshop (InfoSecWorld 2017)☆66Updated 7 years ago
- SIGMA UI is a free open-source application based on the Elastic stack and Sigma Converter (sigmac)☆184Updated 3 years ago
- A Splunk app with saved reports derived from Sigma rules☆72Updated 6 years ago
- Recon Hunt Queries☆75Updated 3 years ago
- Sysmon Splunk App☆46Updated 6 years ago
- A community event for security researchers to share their favorite notebooks☆106Updated 9 months ago
- Threat Alert Logic Repository☆89Updated 5 years ago
- The Infosec Community Definitive Guide to Jupyter Notebooks☆115Updated 4 years ago
- The FASTEST way to consume threat intel.☆64Updated last year
- InvestigationPlaybookSpec☆72Updated 7 years ago
- Assimilate is a series of scripts for using the Naïve Bayes algorithm to find potential malicious activity in HTTP headers☆90Updated 7 years ago
- Log Entry to Sigma Rule Converter☆105Updated 2 years ago
- Scripts for TheHive.☆22Updated 5 years ago
- Import specific data sources into the Sigma generic and open signature format.☆77Updated 2 years ago