mitre / response
A CALDERA plugin for autonomous incident response
☆24Updated 11 months ago
Alternatives and similar repositories for response:
Users that are interested in response are comparing it to the libraries listed below
- PSAttck is a light-weight framework for the MITRE ATT&CK Framework.☆38Updated 3 years ago
- A completely unsupported set of scripts used in SANS FOR572, Advanced Network Forensics and Analysis☆25Updated last month
- A collection of searches, interesting events and tables on Crowdstrike Splunk.☆29Updated 3 years ago
- incident response scripts☆19Updated 5 years ago
- Sharing Threat Hunting runbooks☆24Updated 5 years ago
- A collection of hunting and blue team scripts. Mostly others, some my own.☆38Updated 2 years ago
- PowerSponse is a PowerShell module focused on targeted containment and remediation during incident response.☆38Updated 2 years ago
- Notebooks created to attack and secure Active Directory environments☆27Updated 5 years ago
- Provides detection capabilities and log conversion to evtx or syslog capabilities☆52Updated 2 years ago
- Defence Against the Dark Arts☆34Updated 5 years ago
- Searches for Insider Threat Hunting☆30Updated 5 years ago
- Repository with Sample threat hunting notebooks on Security Event Log Data Sources☆59Updated 2 years ago
- Expert Investigation Guides☆51Updated 3 years ago
- A tool to modify timestamps in a packet capture to a user selected date☆31Updated 3 years ago
- A script to assist in processing forensic RAM captures for malware triage☆27Updated 3 years ago
- ☆10Updated 5 years ago
- Defensive Origins Training Schedule☆37Updated last year
- Recon Hunt Queries☆76Updated 3 years ago
- Powershell / C# based cross platform forensic framework based for live incident response☆22Updated 4 years ago
- pollen - A command-line tool for interacting with TheHive☆35Updated 5 years ago
- Splunk app for Threat hunting☆15Updated 6 years ago
- A collection of Terraform and Ansible scripts that automatically (and quickly) deploys a small Velociraptor R&D lab.☆20Updated 3 years ago
- Purple Team Security☆74Updated 2 years ago
- The project was moved here https://github.com/atomic-threat-coverage/atomic-threat-coverage☆24Updated 5 years ago
- pocket guide for core threat hunting concepts☆23Updated 4 years ago
- FireEye iSIGHT Alert Feeder for TheHive, an Open Source and Free Security Incident Response Platform☆16Updated 6 years ago
- ☆40Updated 4 years ago
- A few quick recipes for those that do not have much time during the day☆22Updated 2 months ago