misje / wazuh-opencti
Wazuh extension looking up alert data against indicators in OpenCTI threat intel
☆18Updated last year
Alternatives and similar repositories for wazuh-opencti:
Users that are interested in wazuh-opencti are comparing it to the libraries listed below
- ☆33Updated last year
- OpenCTI–Wazuh connector looking for indicators in Wazuh and creating sightings☆16Updated 7 months ago
- Personal scripts☆13Updated 6 months ago
- ☆31Updated 3 years ago
- (Unofficial) Wazuh integration to send alerts to IRIS.☆17Updated 2 months ago
- Docker image for MISP☆123Updated 2 months ago
- Useful scripts for those administering Wazuh☆80Updated 2 months ago
- ☆19Updated 3 years ago
- Convert Sigma rules to Wazuh rules☆64Updated 11 months ago
- Integrate your Wazuh-Manager or Graylog with the SOCFortress Threat Intel Service☆28Updated 5 months ago
- A production ready Dockered MISP☆216Updated this week
- CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable repor…☆231Updated this week
- Sysmon and wazuh integration with Sigma sysmon rules [updated]☆64Updated 3 years ago
- OpenCTI Docker deployment helpers☆177Updated this week
- Docker image for Velocidex Velociraptor☆122Updated 2 weeks ago
- Import CrowdStrike Threat Intelligence into your instance of MISP☆44Updated last week
- A Ruleset to enhance detection capabilities of Ossec using Sysmon☆91Updated 2 years ago
- MISP Playbooks☆188Updated last month
- Open Source Platform for storing, organizing, and searching documents related to cyber threats☆163Updated last year
- SOCFortress CoPilot☆263Updated last week
- ☆51Updated 3 years ago
- A collection of tips for using MISP.☆74Updated 3 months ago
- Zeek-Formatted Threat Intelligence Feeds☆356Updated this week
- A collection of various SIEM rules relating to malware family groups.☆65Updated 9 months ago
- ☆15Updated 2 years ago
- Tools for Wazuh by Juan C. Tello☆14Updated 3 years ago
- Roota is a public-domain language of threat detection and response that combines native queries from a SIEM, EDR, XDR, or Data Lake with …☆124Updated 8 months ago
- ☆68Updated 7 months ago
- Dettectinator - The Python library to your DeTT&CT YAML files.☆109Updated 2 months ago
- The Project can be used to integrate QRadar with MISP Threat Sharing Platform☆39Updated 2 years ago