Alternatives and similar repositories for Splunk4DFIR

Users that are interested in Splunk4DFIR are comparing it to the libraries listed below

• mbabinski / Sigma-Rules
  A repository of my own Sigma detection rules.
  ☆160Updated 10 months ago
• mgreen27 / DetectRaptor
  A repository to share publicly available Velociraptor detection content
  ☆184Updated last week
• Yamato-Security / hayabusa-sample-evtx
  Sample evtx files to use for testing hayabusa detection rules
  ☆58Updated 8 months ago
• blueteam0ps / AllthingsTimesketch
  This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.
  ☆111Updated last year
• magicsword-io / sigconverter.io
  An opensource sigma conversion tool built using pysigma
  ☆132Updated last month
• keydet89 / Events-Ripper
  Project based on RegRipper, to extract add'l value/pivot points from TLN events file
  ☆85Updated 5 months ago
• THORCollective / HEARTH
  A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters …
  ☆266Updated last week
• mnrkbys / fjta
  FJTA (Forensic Journal Timeline Analyzer) is a tool that analyzes Linux filesystem (ext4, XFS) journals (not systemd-journald logs), gene…
  ☆77Updated this week
• curated-intel / Threat-Actor-Profile-Guide
  The Threat Actor Profile Guide for CTI Analysts
  ☆110Updated 2 years ago
• The-DFIR-Report / DFIR-Artifacts
  Repository for sharing examples of our artifacts data and for use in new analyst recruitment.
  ☆101Updated 3 months ago
• chocolatecoat / DFIR-Templates
  Incident Response documents and tooling
  ☆74Updated last year
• securityjoes / ForensicMiner
  A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.
  ☆154Updated 3 months ago
• dfir-scripts / siftgrab
  ☆68Updated 7 months ago
• BushidoUK / CTI-Analyst-Challenge
  An analytical challenge created to test junior analysts looking to try performing proactive and reactive cyber threat intelligence.
  ☆199Updated last year
• MISP / misp-playbooks
  MISP Playbooks
  ☆205Updated last month
• EZToolsManuals / EZToolsManuals
  A repo hosting the Markua content for the EZ Tools manuals hosted on Leanpub
  ☆77Updated last year
• khyrenz / parseusbs
  Parses USB connection artifacts from offline Registry hives
  ☆100Updated last month
• Yamato-Security / takajo
  Takajō (鷹匠) is a Hayabusa results analyzer.
  ☆129Updated this week
• pr0xylife / pr0xylife
  Config files for my GitHub profile.
  ☆14Updated 2 years ago
• center-for-threat-informed-defense / cti-blueprints
  CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable repor…
  ☆261Updated 4 months ago
• tsale / Sigma_rules
  Sigma rules to share with the community
  ☆121Updated 6 months ago
• redhat-infosec / priority-intelligence-requirements-dev
  This guide describes a process for developing Cyber Threat Intelligence Priority Intelligence Requirements
  ☆122Updated last year
• UncoderIO / Uncoder_IO
  An IDE and translation engine for detection engineers and threat hunters. Be faster, write smarter, keep 100% privacy.
  ☆155Updated 5 months ago
• CyberCX-DFIR / usnjrnl_rewind
  USN Journal full path builder
  ☆61Updated 10 months ago
• socprime / the-prime-hunt
  A browser extension for threat hunting that provides one UI for different SIEMs/EDRs and simplifies investigation
  ☆77Updated last year
• digitalsleuth / WIN-FOR
  Windows Forensics Environment Builder
  ☆155Updated 2 weeks ago
• AttackIQ / DetectIQ
  ☆110Updated 2 months ago
• The-DFIR-Report / Sigma-Rules
  Rules generated from our investigations.
  ☆196Updated last month
• AndrewRathbun / Awesome-KAPE
  A curated list of KAPE-related resources
  ☆171Updated 3 months ago
• strozfriedberg / sidr
  Search Index Database Reporter
  ☆114Updated 8 months ago