mitre-attack / attack-datasources-stix-betaLinks
Mock STIX data demonstrating the new data source representation
☆16Updated 2 years ago
Alternatives and similar repositories for attack-datasources-stix-beta
Users that are interested in attack-datasources-stix-beta are comparing it to the libraries listed below
Sorting:
- Splunk code (SPL) for serious threat hunters and detection engineers.☆289Updated 2 years ago
- ☆99Updated 3 years ago
- Resources for SANS CTI Summit 2021 presentation☆104Updated 2 years ago
- These are open source rules that can be utilized with QRadar to detect various types of threats in the environment.☆58Updated 6 years ago
- This is a repository for freq.py and freq_server.py☆214Updated last week
- This directory features proven systems that demonstrate value to your threat-informed efforts using metrics.☆114Updated last year
- Sigma Detection Rule Repository☆92Updated 5 years ago
- This content is analysis and research of the data sources currently listed in ATT&CK.☆414Updated 2 years ago
- CASCADE Server☆274Updated 3 years ago
- A collection of Splunk's Search Processing Language (SPL) for Threat Hunting with CrowdStrike Falcon☆214Updated 5 years ago
- A Splunk App containing Sigma detection rules, which can be updated from a Git repository.☆111Updated 6 years ago
- SIEGMA - Transform Sigma rules into SIEM consumables☆159Updated 10 months ago
- OSSEM Detection Model☆184Updated 3 years ago
- Security Monitoring Resolution Categories☆138Updated 4 years ago
- 🚨ATTENTION🚨 The NIST 800-53 mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept…☆497Updated last year
- A cross-platform baselining, threat hunting, and attack surface analysis tool for security teams.☆255Updated 10 months ago
- Creating a resource to help build and manage an Insider Threat program.☆101Updated last year
- ☆128Updated 2 years ago
- Convert Sigma rules to LogRhythm searches☆23Updated 3 years ago
- This is a python tool aiming to make using TheHive webhooks easier.☆28Updated 5 years ago
- Threat Hunting & Incident Investigation with Osquery☆216Updated 3 years ago
- The principal objective of this project is to develop a knowledge base of the tactics, techniques, and procedures (TTPs) used by insiders…☆147Updated 7 months ago
- Cybersecurity Incident Response Plan☆109Updated 5 years ago
- Repository of public reference frameworks for the DFIR community.☆121Updated 2 years ago
- This was code for analyzing round 1 of the MITRE Enterprise ATT&CK Evaluation. Please check out https://github.com/joshzelonis/Enterprise…☆94Updated 5 years ago
- A list of my personal projects☆178Updated 3 years ago
- Converts Sigma detection rules to a Splunk alert configuration.☆115Updated 5 years ago
- ☆134Updated last year
- ☆121Updated last week
- A port of BHIS's Backdoors & Breaches for playingcards.io☆64Updated 3 years ago