This program exports MITRE ATT&CK framework in ELK dashboard
☆81Dec 8, 2022Updated 3 years ago
Alternatives and similar repositories for attack-to-elk
Users that are interested in attack-to-elk are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- OSSEM Modular☆27Jun 29, 2020Updated 6 years ago
- Top ATT&CK Techniques helps defenders approach the breadth and complexity of MITRE ATT&CK® with a prioritized top 10 list of techniques t…☆129Updated this week
- F-Secure Lightweight Acqusition for Incident Response (FLAIR)☆16Jul 5, 2021Updated 5 years ago
- MineMeld nodes for MISP☆19Jan 23, 2024Updated 2 years ago
- ☆29Feb 16, 2021Updated 5 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆14Mar 5, 2021Updated 5 years ago
- A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework☆357Nov 3, 2020Updated 5 years ago
- Repository for SPEED SIEM Use Case Framework☆60May 2, 2020Updated 6 years ago
- Code and Slides of my BSides London 2019 presentation about Attacker Emulation using CALDERA☆22Jun 9, 2019Updated 7 years ago
- ☆18Jul 24, 2019Updated 7 years ago
- This is a repository from Adam Swan and I's presentation on Windows Logs Zero 2 Hero.☆22Jan 30, 2018Updated 8 years ago
- Open-source framework to detect outliers in Elasticsearch events☆204May 22, 2023Updated 3 years ago
- Table Top Exercise (TTX) for Computer Security Incident Response (CSIRT) teams. The templatized artifacts provided will hopefully help te…☆44Updated this week
- A Splunk app mapped to MITRE ATT&CK to guide your threat hunts☆1,190Jul 26, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Web UI for testing Elastic Beats processors☆19Oct 13, 2026Updated 2 weeks ago
- Python libary to normalize Yara signatures☆19Oct 9, 2020Updated 6 years ago
- A Splunk App containing Sigma detection rules, which can be updated from a Git repository.☆109Feb 6, 2020Updated 6 years ago
- Threat Feed Aggregation, Made Easy☆169Jul 13, 2020Updated 6 years ago
- CertWatcher is a new take on monitoring for phishing sites. It is meant to be a set and forget service that will send you a daily report …☆10Oct 12, 2020Updated 6 years ago
- Mitre Att&ck Technique Emulation☆82Mar 6, 2019Updated 7 years ago
- Script for automating Linux memory capture and analysis☆12May 6, 2020Updated 6 years ago
- Mapping Corelight or Zeek data to Elastic Common Schema fields☆35Oct 22, 2026Updated last week
- Searches open files shares for password files, database backups, etc. Extend as you see fit☆28Dec 13, 2019Updated 6 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Purpose of this repository is to help all the beginner and experienced professionals to understand,learn and share new tricks for the com…☆32May 10, 2018Updated 8 years ago
- A Volatility command reference mind map☆14Sep 20, 2018Updated 8 years ago
- ☆16Jan 31, 2015Updated 11 years ago
- Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK☆1,080Nov 28, 2024Updated last year
- This is a repository of vendor-agnostic workflows provided for those interested in deploying Security Orchestration, Automation, and Resp…☆98Mar 2, 2021Updated 5 years ago
- A collection of demisto tools☆20Dec 29, 2025Updated 10 months ago
- Place for resources used during the Mordor Detection hackathon event featuring APT29 ATT&CK evals datasets☆145Oct 12, 2020Updated 6 years ago
- CSIRT Jump Bag☆27Apr 25, 2024Updated 2 years ago
- This batch script file wants to check your EDR systems detection and response capabilities in a more noisy way!☆12Jul 3, 2020Updated 6 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Resources for SANS CTI Summit 2021 presentation☆104Nov 8, 2023Updated 2 years ago
- Parser for Windows Scheduled Task files.☆13Apr 26, 2023Updated 3 years ago
- Detect Tactics, Techniques & Combat Threats☆2,352Oct 19, 2026Updated last week
- A Modern Approach☆10Sep 5, 2015Updated 11 years ago
- ☆24Nov 3, 2019Updated 6 years ago
- This post is inspired by all the hard working DFIR, and more broadly security professionals, who have put in the hard yards over the year…☆14Nov 15, 2019Updated 6 years ago
- Mapping the ATT&CK matrix in a Cowrie honeypot☆16Aug 31, 2018Updated 8 years ago