morphuslabs / distinctLinks
Find potential Indicators of Compromise among similar Linux servers
☆29Updated 7 years ago
Alternatives and similar repositories for distinct
Users that are interested in distinct are comparing it to the libraries listed below
Sorting:
- Security Operations Center Multiple Purpose Tool, takes IP address input, conducts OSINT, conducts splunk, bro, fireeye, imperva, and fir…☆21Updated 8 years ago
- Materials from my Circle City Con talk: Fantastic OSINT (and where to find it)☆23Updated 9 years ago
- Splunk App to assist Sysmon Threat Hunting☆38Updated 8 years ago
- Integrating Sysinternals Autoruns’ logs into Security Onion☆31Updated last year
- ☆30Updated 6 years ago
- This is a repository from Adam Swan and I's presentation on Windows Logs Zero 2 Hero.☆22Updated 7 years ago
- A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.☆14Updated 6 years ago
- Sysmon configuration file template with default high-quality event tracing☆17Updated 4 years ago
- Check_ioc is a script to check for various, selectable indicators of compromise on Windows systems via PowerShell and Event Logs. It was …☆77Updated 7 years ago
- ☆53Updated 7 years ago
- Lutech TMS EHAT-NG☆14Updated 8 years ago
- pollen - A command-line tool for interacting with TheHive☆35Updated 6 years ago
- OSSEC Decoder & Rulesets for Sysmon Events☆15Updated 9 years ago
- ☆55Updated 3 years ago
- Security Onion Elastic Stack☆46Updated 4 years ago
- A collection of scripts that I've written while pentesting.☆31Updated 6 years ago
- 504 VSAgent☆23Updated 7 years ago
- Create a MS Word index file from PowerPoint notes and slides☆44Updated 4 years ago
- Queries to parse sysmon event log file with microsoft logparser☆56Updated 10 years ago
- A tool for importing vulnerability scanner data and then allowing you to manipulate the risks, affected hosts, and create risk ordered ou…☆80Updated last year
- Use DNS to hunt for threats including DGAs☆15Updated 9 years ago
- PowerShell No Agent Hunting☆110Updated 7 years ago
- Windows PowerShell domain scanning tool☆54Updated 9 years ago
- Scandiff is a PowerShell script to automate host discovery and scanning with nmap. After discovering and scanning hosts, scandiff perfor…☆17Updated 10 years ago
- automate your MISP installs☆68Updated 5 years ago
- Harbinger Threat Intelligence☆82Updated 9 years ago
- Indices for courses in SANS' Network Security Operations curriculum☆16Updated 9 years ago
- ☆61Updated 7 years ago
- Web based analysis platform for use with the AWS_IR command line tool.☆17Updated 8 years ago
- Identify compromised domains or emails. A python based HIBP and HackedEmails wrapper☆38Updated 6 years ago