misje / wazuh-opencti

Related projects: ⓘ

• juaromu / wazuh-opencti
  ☆32Updated last year
• socfortress / Playbooks
  Playbooks for SOC Analysts
  ☆119Updated last year
• MISP / misp-docker
  A production ready Dockered MISP
  ☆138Updated this week
• OpenSecureCo / Wazuh
  ☆30Updated 2 years ago
• theflakes / sigma_to_wazuh
  Convert Sigma rules to Wazuh rules
  ☆55Updated 5 months ago
• socfortress / CoPilot
  SOCFortress CoPilot
  ☆188Updated this week
• weslambert / velociraptor-docker
  Docker image for Velocidex Velociraptor
  ☆112Updated 2 months ago
• center-for-threat-informed-defense / cti-blueprints
  CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable repor…
  ☆189Updated 10 months ago
• MISP / misp-playbooks
  MISP Playbooks
  ☆167Updated last month
• socfortress / SOCFortress-Threat-Intel
  Integrate your Wazuh-Manager or Graylog with the SOCFortress Threat Intel Service
  ☆21Updated last year
• Hestat / ossec-sysmon
  A Ruleset to enhance detection capabilities of Ossec using Sysmon
  ☆83Updated 2 years ago
• NUKIB / misp
  Docker image for MISP
  ☆109Updated last week
• docintelapp / DocIntel
  Open Source Platform for storing, organizing, and searching documents related to cyber threats
  ☆154Updated 10 months ago
• tguard-soc-package / nusantara
  ☆175Updated 4 months ago
• Xboarder56 / QRCE-Rules
  These are open source rules that can be utilized with QRadar to detect various types of threats in the environment.
  ☆50Updated 5 years ago
• cudeso / misp2sentinel
  MISP to Sentinel integration
  ☆57Updated last week
• dariommr / scripts
  Personal scripts
  ☆12Updated last week
• secure-cake / rapid-endpoint-investigations
  Scripts for rapid Windows endpoint "tactical triage" and investigations with Velociraptor and KAPE
  ☆96Updated 5 months ago
• nasbench / SIGMA-Resources
  Resources To Learn And Understand SIGMA Rules
  ☆163Updated last year
• keyboardcrunch / sentinelone-queries
  Repository of SentinelOne Deep Visibility queries.
  ☆116Updated 3 years ago
• shauntdergrigorian / splunkqueries
  A list of Splunk queries that I've collected and used over time.
  ☆70Updated 3 years ago
• OpenCTI-Platform / docker
  OpenCTI Docker deployment helpers
  ☆153Updated this week
• archanchoudhury / DFIR-Tools
  This is the One Stop place where you can find almost all of your Tools of Requirements in DFIR
  ☆73Updated 2 years ago
• activecm / threat-tools
  Tools for simulating threats
  ☆170Updated 10 months ago
• joshlemon / DFIR-Reference-Frameworks
  Repository of public reference frameworks for the DFIR community.
  ☆105Updated last year
• weslambert / velocistack
  ☆49Updated 4 months ago
• secure-cake / win-mal-investigations
  Windows Malware Investigation Scripts & Docs
  ☆74Updated 6 months ago
• secnnet / Splunk-Search-Queries
  ☆24Updated 10 months ago
• acquiredsecurity / Sentinel-One-STAR-Rules-Threat-Hunts
  SentinelOne STAR Rules
  ☆45Updated 10 months ago
• weslambert / securityonion-velociraptor
  Run Velociraptor on Security Onion
  ☆34Updated 2 years ago