SOAR Automation with Shuffle, Wazuh & TheHive | This project integrates Shuffle SOAR, Wazuh SIEM, and TheHive to automate security incident response. It enriches alerts using VirusTotal & AbuseIPDB, creates incidents in TheHive, and sends real-time Discord notifications.
☆139Feb 21, 2025Updated last year
Alternatives and similar repositories for SOAR-Flow
Users that are interested in SOAR-Flow are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Smarter Asset Search, Faster Information Extraction ZoomEye GPT is a browser extension designed specifically for cybersecurity profession…☆26Apr 30, 2025Updated last year
- ☆13Mar 28, 2026Updated 7 months ago
- Security Operation Automation lab Design | Process | & Architecture with a SIEM☆10Feb 11, 2025Updated last year
- Resources and notes for Offensive Security's SOC-200 course and OffSec Defense Analyst (OSDA) exam☆18May 19, 2023Updated 3 years ago
- Active Response plugin. Osquery to execute wazuh/ossec active response plugins. You can write your own plugins, easy to plug☆13Jun 20, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- MCP Server for TheHive☆16Dec 6, 2025Updated 10 months ago
- AI-Powered Static Application Security Testing (SAST) — written in Go.☆40Oct 27, 2026Updated last week
- ☆19Oct 20, 2021Updated 5 years ago
- SysX (RAT or RMM) is for educational or internal demo use only. Do not upload this binary to VirusTotal or other public sandboxes.☆24Sep 2, 2025Updated last year
- ☆22Apr 10, 2025Updated last year
- ☆15Dec 6, 2023Updated 2 years ago
- This project automates SOC workflows using Wazuh, Shuffle, and TheHive. It involves setting up a Windows 10 client with Sysmon and Ubuntu…☆50Jun 7, 2024Updated 2 years ago
- Wazuh integration TheHive☆43Feb 21, 2023Updated 3 years ago
- OpenCTI–Wazuh connector looking for indicators in Wazuh and creating sightings☆26Aug 13, 2024Updated 2 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- AI-Driven Breach and Attack Simulation Tool (Initial Proof of Concept for AI Pentest Copilot)☆28Jan 6, 2025Updated last year
- ☆18Sep 22, 2025Updated last year
- Menu for Thor scanner lite☆20Oct 24, 2025Updated last year
- Mapping of open-source detection rules and atomic tests.☆217Jul 15, 2026Updated 3 months ago
- ☆43Dec 24, 2024Updated last year
- 🚀 Script Auto Install " Wazuh " no Ubuntu.☆13Jun 10, 2025Updated last year
- Turn any blog into structured threat intelligence.☆64Oct 19, 2026Updated 2 weeks ago
- If you a security engineer or an aspirant Security professional then Setting up a Wazuh home lab environment is an excellent way for SOC …☆24Mar 27, 2024Updated 2 years ago
- Linux version of Splunk MCP LLM MCP SIEMulator . A Docker lab integrating Splunk SIEM with Ollama LLM via Model Context Protocol for AI-p…☆20Sep 2, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- MISP Playbooks☆237Oct 14, 2025Updated last year
- Automated security investigation tool using Microsoft MCP Servers, GitHub Copilot, Python Modules and custom copilot-instructions.☆250Oct 8, 2026Updated 3 weeks ago
- Hands-on projects for beginners to learn and practice Linux forensics and essential cybersecurity skills☆19Jun 29, 2024Updated 2 years ago
- Scripts for importing threat feeds and CTI articles, blogs, and reports into MISP.☆18Jun 28, 2026Updated 4 months ago
- ☆14Jun 4, 2026Updated 4 months ago
- my MSTICpy practice and custom tools repository☆11Apr 23, 2025Updated last year
- Repo to hold wazuh manager mcp server☆93Oct 11, 2026Updated 3 weeks ago
- Incremental Machine Leaning by example - Detecting suspicious activity in real time with Zeek data streams, River and JA3 hashes☆17Aug 10, 2022Updated 4 years ago
- NIST based open source security automation delivered as AWS cloudformation☆20Jan 8, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Awesome List of Enterprise Security Tools' Community Edition☆16Jul 29, 2026Updated 3 months ago
- ☆49Jul 9, 2024Updated 2 years ago
- In this projects are custom-decoders and custom-rules for Wazuh by me. Feel free to use it, you can redistribute it and/or modify it unde…☆68Mar 7, 2026Updated 7 months ago
- A centralized repository housing comprehensive research and implementations in Low-Level Windows Internals. This lab covers the full spec…☆25Sep 3, 2026Updated 2 months ago
- AI-Agentic Threat Intelligence - 39 collectors, 7 AI agents, 3-link proof chain, D1-D5 exposure scoring☆71Mar 16, 2026Updated 7 months ago
- CarbonBlack EDR detection rules and response actions☆73Sep 10, 2024Updated 2 years ago
- EnumDNS is a modular DNS reconnaissance tool capable of resolving hosts from various sources, including wordlists, BloodHound files, and …☆22Oct 21, 2026Updated last week