mrebeschini / elastic-siem-workshop
☆27Updated 4 years ago
Related projects: ⓘ
- ☆20Updated 4 years ago
- A collection of notebooks built for defensive and offensive operations.☆76Updated 3 years ago
- Wazuh - Splunk App☆48Updated 10 months ago
- SOC Workflow App helps Security Analysts and Threat Hunters explore suspicious events, look into raw events arriving at the Elastic Stack…☆92Updated 2 years ago
- This program exports MITRE ATT&CK framework in ELK dashboard☆77Updated last year
- A simple Docker container that serves the MITRE ATT&CK Navigator web app☆27Updated last year
- Presentation Slides and Video links☆31Updated 2 years ago
- Send your nessus compliance and vulnerability scan data to ElasticSearch☆27Updated 6 years ago
- Security Onion Elastic Stack☆46Updated 3 years ago
- Log Entry to Sigma Rule Converter☆105Updated 2 years ago
- ☆37Updated 4 years ago
- Repo of python/bash scripts for identifying IoC's in threat feed and other online tools☆26Updated 4 years ago
- Download a list of suspected malicious IPs and Domains. Create a QRadar Reference Set. Search Your Environment For Malicious IPs☆66Updated 3 years ago
- A website and framework for testing NIDS detection☆56Updated 3 years ago
- Sharing Threat Hunting runbooks☆24Updated 5 years ago
- Synapse: a Meta Alert Feeder for TheHive, a Security Incident Response Platform☆71Updated last year
- automate your MISP installs☆66Updated 4 years ago
- SIEM Detection Use Case Library mapped to MITRE ATT&CK tactics and techniques☆12Updated 5 years ago
- This package allows the use of a custom Elastalert Alert which creates alerts with observables in TheHive using TheHive4Py.☆27Updated 3 years ago
- Best practices in threat intelligence☆46Updated last year
- A tool to assess data quality, built on top of the awesome OSSEM.☆76Updated 2 years ago
- A Splunk App containing Sigma detection rules, which can be updated from a Git repository.☆106Updated 4 years ago
- SIGMA UI is a free open-source application based on the Elastic stack and Sigma Converter (sigmac)☆184Updated 3 years ago
- Deploy and maintain Symon through the Splunk Deployment Sever☆31Updated 4 years ago
- This is a python tool aiming to make using TheHive webhooks easier.☆26Updated 3 years ago
- A few scripts I put together for testing purposes and to automate a few capabilities while doing IR. These scripts are also part of my bl…☆53Updated 6 years ago
- Threat Hunting with ELK Workshop (InfoSecWorld 2017)☆64Updated 6 years ago
- A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for…☆32Updated 2 years ago
- Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing☆104Updated 8 months ago