Simple Docker-based quickstart for osquery, Fleet, and ELK stack
☆64Sep 5, 2023Updated 3 years ago
Alternatives and similar repositories for fleet-osquery-in-a-box
Users that are interested in fleet-osquery-in-a-box are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- JXA script for Mythic that prints the TCC.db☆15Apr 18, 2021Updated 5 years ago
- event shipper for Carbon Black Defense notifications☆10Feb 25, 2023Updated 3 years ago
- Discover which process execute a hunted binary inside macOS☆29Dec 15, 2021Updated 4 years ago
- Launchd daemon that reports major OSX modifications through growl☆16Feb 19, 2015Updated 11 years ago
- Various scripts for macOS tasks☆145Nov 24, 2025Updated 11 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Provides an easy way to collect and send Slack access & integration logs.☆13Oct 19, 2021Updated 5 years ago
- Deploy Kolide's Fleet into AWS using Terraform.☆16Apr 18, 2018Updated 8 years ago
- ☆15Aug 20, 2019Updated 7 years ago
- osquery table extension that allows querying of information from the macOS private SystemPolicy.framework☆33Oct 29, 2021Updated 5 years ago
- checks site content against known good ssdeep hash, identifies matches☆10Jun 2, 2019Updated 7 years ago
- POC for a basic C2 server using the python aiohttp framework☆15Mar 22, 2020Updated 6 years ago
- Dockerfiles for containerized osquery☆14May 23, 2017Updated 9 years ago
- ☆18Sep 10, 2021Updated 5 years ago
- A script for use with SSH or Apple deployment tools for deploying/enrolling the MSP RMM Agent for Mac☆10Mar 13, 2018Updated 8 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Swift code to parse the quarantine history database, Chrome history database, Safari history database, and Firefox history database on ma…☆16Dec 3, 2020Updated 5 years ago
- A library to parse macOS LoginItems☆17Aug 28, 2022Updated 4 years ago
- Remotely collect linux live forensics artifacts.☆14Jul 8, 2022Updated 4 years ago
- Mystique may be used to discover infection markers that can be used to vaccinate endpoints against malware. It receives as input a malici…☆82Sep 26, 2017Updated 9 years ago
- Mapping the MITRE ATT&CK Matrix with Osquery☆811May 11, 2023Updated 3 years ago
- Decrypt Wireless Passwords On Windows☆15Jun 27, 2020Updated 6 years ago
- An Ubuntu 18.04 box for Mythic C2 framework development☆17Jun 17, 2022Updated 4 years ago
- Collection of operational focused osquery dashboards.☆10Jan 20, 2021Updated 5 years ago
- Rules Shared by the Community from 100 Days of YARA 2023 -☆19Apr 10, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A collection of scripts to initialize a windows VM to run all the malwares!☆106Apr 3, 2020Updated 6 years ago
- ☆29Feb 16, 2021Updated 5 years ago
- Password spraying on sites that require 2+ page loads and dynamic nonces☆32Jun 23, 2019Updated 7 years ago
- Catalog Red Team techniques that cause popups in various macOS versions☆16Nov 18, 2024Updated last year
- Objective-C runtime library wrapper for Nim☆19Jun 7, 2017Updated 9 years ago
- A repository for using osquery for incident detection and response☆909Oct 2, 2026Updated last month
- Python 3 library to build YARA rules.☆14Oct 24, 2021Updated 5 years ago
- A flexible control server for osquery fleets☆1,097Dec 15, 2020Updated 5 years ago
- Scripts from my book OS X Incident Response Scripting and Analysis -> https://www.amazon.com/dp/012804456X/ref=cm_sw_r_tw_dp_U_x_fQeLAb68…☆49Sep 23, 2016Updated 10 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆15Apr 20, 2020Updated 6 years ago
- JXA script based on research by Jeff Johnson on leveraging TextEdit to remove quarantine attributes on files. Jeff's original research is…☆17Jan 31, 2021Updated 5 years ago
- Presentation for PowerShell + DevOps Global Summit, 2019☆10Apr 30, 2019Updated 7 years ago
- A module to assist with "Build Once, Deploy Many" publishing paradigms for PowerShell☆12Aug 25, 2020Updated 6 years ago
- Snort + Pulledpork + Websnort in Docker!☆22Nov 9, 2021Updated 4 years ago
- ☆12Sep 9, 2026Updated last month
- A collection of projects demonstrating various commandline cloaking techniques on Linux☆62Aug 4, 2022Updated 4 years ago