Parse pfSense/OPNSense logs using Logstash, GeoIP tag entities, add additional context to logs, then send to Azure Sentinel for analysis.
☆31Feb 28, 2022Updated 4 years ago
Alternatives and similar repositories for pf-azure-sentinel
Users that are interested in pf-azure-sentinel are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Powershell JWT module☆14May 17, 2025Updated last year
- Sentinel Analytics Rule converter PowerShell module☆71Feb 24, 2026Updated 7 months ago
- AzLogDcrIngestPS - Unleashing the power of Log Ingestion API with Azure LogAnalytics custom table v2, Azure Data Collection Rules and Azu…☆35Aug 27, 2026Updated last month
- Packer configuration files for Windows 10☆14Aug 17, 2021Updated 5 years ago
- Azure OpenAI Playbook created for Microsoft Sentinel☆14May 2, 2024Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Automatically create iSCSI targets for all drives except for a boot device☆26May 23, 2025Updated last year
- Ingesting Shodan Monitor Alerts to Microsoft Sentinel☆33Sep 19, 2023Updated 3 years ago
- ☆11Oct 27, 2018Updated 7 years ago
- This operational dashboard correlates data from Microsoft Defender for Endpoint/Server (MDE) and Azure Monitor Agent (AMA) to identify co…☆18Sep 4, 2026Updated last month
- Azure function that processes incoming notifications from the O365 Activity API☆54Sep 10, 2026Updated last month
- ☆12Apr 26, 2018Updated 8 years ago
- Translate an ECS mapping CSV to starter pipelines for Beats, Elasticsearch or Logstash☆54Mar 9, 2022Updated 4 years ago
- Powershell Functions to interact with TheHive-Project☆11Jun 27, 2019Updated 7 years ago
- A collection of scripts and works related to Azure Sentinel☆41Jul 9, 2022Updated 4 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Framework that sits on top of Splunk Enterprise Security to do auto-mitigation☆14Dec 29, 2014Updated 11 years ago
- Maltego entity pack encompassing the entire STIX 1.2 data model and a targeted subset of the CybOX 2.1 data model☆11Mar 24, 2016Updated 10 years ago
- The Microsoft Sentinel Triage AssistanT (STAT) enables easy to create incident triage automation in Microsoft Sentinel☆291Jan 2, 2026Updated 9 months ago
- Random scripts for log mining, intel gathering, network querying, and other incident response-ish activities☆17Sep 13, 2022Updated 4 years ago
- Rapid Azure Diagnostic deployments☆27Jan 1, 2024Updated 2 years ago
- Sentinel Logic Apps, Playbooks and Workbooks to automate enrichment, incident analysis and more.☆124Jan 18, 2026Updated 8 months ago
- Web Administration for Windows Servers☆12Jul 30, 2025Updated last year
- Docker-Compose for production (Let's encrypt + NGINX + lightning charged + C-Lightning + Bitcoin Core)☆11Jun 26, 2018Updated 8 years ago
- PowerShell GUI for Microsoft Graph API☆17Jul 10, 2020Updated 6 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Sample implementation of windows credential provider in Rust☆18Aug 3, 2023Updated 3 years ago
- Self-hosted packages for the Windows Package Manager, a.k.a. "winget". Maintained by Cloudflight.☆18Jul 10, 2023Updated 3 years ago
- An extension for .NET Interactive Notebooks that provides authenticated Microsoft Graph clients.☆17Aug 18, 2025Updated last year
- A comprehensive list of usable Entra ID first-party clients with pre-consented Microsoft Graph scopes, in a simple YAML-file explorable w…☆169Mar 20, 2026Updated 6 months ago
- ☆27Sep 29, 2026Updated last week
- This action checks the version tags in your repository to ensure correct semantic versioning behavior.☆13Updated this week
- A desktop App to add STIX-2 objects to TAXII-2.0 servers☆11Mar 13, 2019Updated 7 years ago
- Tools by cooey comrades for cooey comrades.☆16Feb 23, 2023Updated 3 years ago
- Drone and UAV Digital Forensic☆20Apr 27, 2026Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- pfSense/OPNsense + Elastic Stack☆1,221Oct 2, 2026Updated last week
- ☆11Aug 15, 2024Updated 2 years ago
- Scripts and resources to support the Compliance Build-Intent engagements at https://aka.ms/mci/workshops☆33Aug 19, 2026Updated last month
- Bulk turn on Analytic rules in Azure Sentinel☆18Oct 7, 2021Updated 5 years ago
- Scandiff is a PowerShell script to automate host discovery and scanning with nmap. After discovering and scanning hosts, scandiff perfor…☆19Oct 29, 2014Updated 11 years ago
- A collection of things I've created or found that I think is useful for Azure Sentinel.☆19Jul 8, 2026Updated 3 months ago
- Wrapper for NLog to easily use NLog logging capabilities in PowerShell☆20Mar 22, 2018Updated 8 years ago