lmakonem / ELK-SIEM-Ansible-Playbook
Ansible Playbook to install the ELK Stack
☆42Updated 4 years ago
Alternatives and similar repositories for ELK-SIEM-Ansible-Playbook:
Users that are interested in ELK-SIEM-Ansible-Playbook are comparing it to the libraries listed below
- Run Velociraptor on Security Onion☆37Updated 2 years ago
- ☆15Updated 2 years ago
- Endpoint detection for remote hosts for consumption by RITA and Elasticsearch☆70Updated last year
- Threat Hunting with ELK Workshop (InfoSecWorld 2017)☆66Updated 7 years ago
- Wazuh integration TheHive☆35Updated 2 years ago
- Sysmon and wazuh integration with Sigma sysmon rules [updated]☆64Updated 3 years ago
- Personal scripts☆13Updated 6 months ago
- Wazuh - Splunk App☆52Updated 6 months ago
- ☆33Updated last year
- Installation script for ELK stack to make life easy.☆69Updated 4 years ago
- Run zeek with zeekctl in docker☆51Updated 6 months ago
- ☆16Updated 3 years ago
- The Project can be used to integrate QRadar with MISP Threat Sharing Platform☆39Updated 2 years ago
- ansible role to setup MISP, Malware Information Sharing Platform & Threat Sharing☆53Updated 3 months ago
- Security Onion + Automation + Response Lab including n8n and Velociraptor☆107Updated 2 years ago
- Threat Intelligence with Elastic - Minemeld integration with Elasticsearch☆19Updated 3 years ago
- ☆34Updated 4 years ago
- Useful scripts for those administering Wazuh☆80Updated 2 months ago
- Collection of walkthroughs on various threat hunting techniques☆75Updated 4 years ago
- Integrate your Wazuh-Manager or Graylog with the SOCFortress Threat Intel Service☆28Updated 5 months ago
- Repo of python/bash scripts for identifying IoC's in threat feed and other online tools☆26Updated 4 years ago
- Repository for SPEED SIEM Use Case Framework☆53Updated 4 years ago
- Extracts fields from zeek logs, compatible with zeek-cut☆21Updated 8 months ago
- An Ansible playbook for deploying the Suricata intrusion detection system and fetching Snort rules with Oinkmaster.☆15Updated 3 years ago
- ☆31Updated 3 years ago
- ☆34Updated 3 years ago
- Security Assessment Data Management and Analysis Tool☆38Updated 3 years ago
- SOC Workflow App helps Security Analysts and Threat Hunters explore suspicious events, look into raw events arriving at the Elastic Stack…☆94Updated 2 years ago
- Lokix Platform is a free open-source solution to help blue teams and threat hunters use Loki Scanner to sweep enterprise networks☆25Updated 4 years ago
- ☆48Updated this week