misje / wazuh-opencti
Wazuh extension looking up alert data against indicators in OpenCTI threat intel
☆19Updated last year
Alternatives and similar repositories for wazuh-opencti
Users that are interested in wazuh-opencti are comparing it to the libraries listed below
Sorting:
- ☆34Updated last year
- Personal scripts☆14Updated 8 months ago
- OpenCTI–Wazuh connector looking for indicators in Wazuh and creating sightings☆17Updated 9 months ago
- ☆19Updated 3 years ago
- Convert Sigma rules to Wazuh rules☆64Updated last year
- ☆17Updated 2 years ago
- ☆31Updated 3 years ago
- A production ready Dockered MISP☆233Updated this week
- (Unofficial) Wazuh integration to send alerts to IRIS.☆17Updated 4 months ago
- Import CrowdStrike Threat Intelligence into your instance of MISP☆46Updated 2 months ago
- This is a repository of vendor-agnostic workflows provided for those interested in deploying Security Orchestration, Automation, and Resp…☆85Updated 4 years ago
- MISP to Sentinel integration☆67Updated last month
- An opensource sigma conversion tool built using pysigma☆125Updated 4 months ago
- Docker image for MISP☆127Updated last month
- Docker image for Velocidex Velociraptor☆126Updated 2 months ago
- ☆83Updated 2 months ago
- Integrate your Wazuh-Manager or Graylog with the SOCFortress Threat Intel Service☆29Updated 7 months ago
- Dettectinator - The Python library to your DeTT&CT YAML files.☆111Updated last month
- Sysmon and wazuh integration with Sigma sysmon rules [updated]☆65Updated 3 years ago
- A repository of my own Sigma detection rules.☆158Updated 8 months ago
- SentinelOne STAR Rules☆60Updated 3 months ago
- A collection of various SIEM rules relating to malware family groups.☆66Updated 10 months ago
- A curated repository of incident response playbooks☆82Updated last year
- The Project can be used to integrate QRadar with MISP Threat Sharing Platform☆39Updated 2 years ago
- ☆52Updated last year
- MISP Playbooks☆199Updated 3 months ago
- Roota is a public-domain language of threat detection and response that combines native queries from a SIEM, EDR, XDR, or Data Lake with …☆127Updated 9 months ago
- A collection of tips for using MISP.☆74Updated 5 months ago
- This repository is for Indicators of Compromise (IOCs) from Zscaler ThreatLabz public reports☆73Updated 5 months ago
- Synapse: a Meta Alert Feeder for TheHive, a Security Incident Response Platform☆71Updated last year