microsoft / msticnbLinks
MSTIC Notebook Components
☆35Updated 4 months ago
Alternatives and similar repositories for msticnb
Users that are interested in msticnb are comparing it to the libraries listed below
Sorting:
- A lab environment for learning about MSTICPy☆38Updated 2 years ago
- A community event for security researchers to share their favorite notebooks☆108Updated last year
- Collection of resources related to the Center for Threat-Informed Defense☆76Updated last year
- ☆19Updated 4 years ago
- The Infosec Community Definitive Guide to Jupyter Notebooks☆131Updated 5 years ago
- Repository with Sample threat hunting notebooks on Security Event Log Data Sources☆69Updated 3 years ago
- A few scripts I put together to send and receive data from an Azure Log Analytics workspace leveraging the Azure Monitor HTTP Data Collec…☆22Updated 2 years ago
- Provides detection capabilities and log conversion to evtx or syslog capabilities☆55Updated 3 years ago
- Synthetic Adversarial Log Objects: A Framework for synthentic log generation☆85Updated 2 years ago
- Cloud Templates and scripts to deploy mordor environments☆129Updated 4 years ago
- Azure Sentinel Template parser☆16Updated 5 years ago
- Collects a listing of MITRE ATT&CK Techniques, then discovers Splunk ESCU detections for each technique☆69Updated last year
- Jupyter notebooks☆25Updated 5 years ago
- OSSEM Data Dictionaries☆65Updated last year
- Invoke-Forensics provides PowerShell commands to simplify working with the forensic tools KAPE and RegRipper.☆117Updated 2 years ago
- Hunting Queries for Microsoft Defender Security Center https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defe…☆39Updated 4 years ago
- Jupyter notebooks for threat hunting☆60Updated 10 months ago
- The idea is simply to save some quick notes that will make it easier for Splunk users to leverage KQL (Kusto), especially giving projects…☆44Updated 5 years ago
- MISP-STIX-Converter - Python library to handle the conversion between MISP and STIX formats☆56Updated 2 weeks ago
- Repository for SPEED SIEM Use Case Framework☆58Updated 5 years ago
- My Jupyter Notebooks☆36Updated 10 months ago
- A free incident response management and documentation workbook☆25Updated 7 years ago
- 🚨ATTENTION🚨 The VERIS mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here …☆72Updated last year
- ☆73Updated last year
- Recon Hunt Queries☆79Updated 4 years ago
- A collection of tips for using MISP.☆75Updated last year
- Actionable data for Security Operations☆19Updated 4 years ago
- ☆33Updated 4 years ago
- ☆65Updated 3 years ago
- Detection Engineering research, open-source tools, conference presentations, and technical publications shared with the security communit…☆28Updated last month