Alternatives and similar repositories for splunk-mcp

Users that are interested in splunk-mcp are comparing it to the libraries listed below

• dandye / adk_runbooks
  ☆54Updated last week
• dwillowtree / diana
  Save toil in security operations with: Detection & Intelligence Analysis for New Alerts (D.I.A.N.A. )
  ☆221Updated last year
• criblio / collector-templates
  Templates for Cribl Stream Collectors
  ☆53Updated this week
• splunk / contentctl
  Splunk Content Control Tool
  ☆122Updated last week
• karmine05 / DEF3ND
  🛡️ SIGMA Detection Engineering Platform A comprehensive AI-powered detection engineering platform for security teams to explore MITRE AT…
  ☆43Updated 4 months ago
• keyboardcrunch / SentinelOne-Query-Navigator
  Web based S1 query navigator for one-click threat hunting
  ☆24Updated 4 years ago
• anvilogic-forge / armory
  Anvilogic Forge
  ☆110Updated 2 months ago
• k-bailey / detection-engineering-maturity-matrix
  ☆98Updated 3 years ago
• acquiredsecurity / Sentinel-One-STAR-Rules-Threat-Hunts
  SentinelOne STAR Rules
  ☆69Updated 9 months ago
• siriussecurity / dettectinator
  Dettectinator - The Python library to your DeTT&CT YAML files.
  ☆118Updated 7 months ago
• splunk / rba
  RBA is Splunk's method to aggregate low-fidelity security events as interesting observations tagged with security metadata to create high…
  ☆61Updated 2 weeks ago
• format81 / TI-Mindmap-GPT
  AI-powered tool designed to help producing Threat Intelligence Mindmap.
  ☆103Updated 5 months ago
• elastic / detection-rules-explorer
  ☆21Updated this week
• splunk / splunk-mltk-container-docker
  Splunk App for Data Science and Deep Learning - container images repository
  ☆60Updated 2 months ago
• OTRF / OSSEM-DM
  OSSEM Detection Model
  ☆180Updated 3 years ago
• UncoderIO / Roota
  Roota is a public-domain language of threat detection and response that combines native queries from a SIEM, EDR, XDR, or Data Lake with …
  ☆132Updated last year
• magicsword-io / sigconverter.io
  An opensource sigma conversion tool built using pysigma
  ☆147Updated last month
• west-wind / Threat-Hunting-With-Splunk
  Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise
  ☆67Updated last year
• keyboardcrunch / sentinelone-queries
  Repository of SentinelOne Deep Visibility queries.
  ☆134Updated 4 years ago
• center-for-threat-informed-defense / insider-threat-ttp-kb
  The principal objective of this project is to develop a knowledge base of the tactics, techniques, and procedures (TTPs) used by insiders…
  ☆146Updated 4 months ago
• SigmaHQ / pySigma-backend-crowdstrike
  SigmaHQ pySigma CrowdStrike processing pipeline
  ☆26Updated 3 months ago
• cisagov / shareable-soar-workflows
  This is a repository of vendor-agnostic workflows provided for those interested in deploying Security Orchestration, Automation, and Resp…
  ☆88Updated 4 years ago
• rowham / WinSigmaRuleAnalyzer
  Generates a detailed CSV file containing Sigma Rules statistics for each service or category, and each level, offering a holistic view of…
  ☆10Updated last year
• AttackIQ / pySigma-backend-kusto
  ☆42Updated 4 months ago
• krdmnbrk / AttackRuleMap
  Mapping of open-source detection rules and atomic tests.
  ☆186Updated 10 months ago
• splunk / splunk-app-examples
  App examples for Splunk Enterprise
  ☆150Updated 2 months ago
• infosecB / Rulehound
  An index of publicly available and open-source threat detection rulesets.
  ☆129Updated 7 months ago
• infosecB / detection-as-code
  An example of how to deploy a Detection as Code pipeline using Sigma Rules, Sigmac, Gitlab CI, and Splunk.
  ☆59Updated 3 years ago
• SumoLogic / cloud-siem-content-catalog
  ☆28Updated last week
• COSSAS / SOARCA
  SOARCA - The Open Source CACAO-based Security Orchestrator!
  ☆98Updated 2 months ago