Alternatives and similar repositories for Splunk-Assessment-of-Mitigation-Implementations:

Users that are interested in Splunk-Assessment-of-Mitigation-Implementations are comparing it to the libraries listed below

• nsacyber / LOCKLEVEL
  A prototype that demonstrates a method for scoring how well Windows systems have implemented some of the top 10 Information Assurance mit…
  ☆99Updated 8 years ago
• nsacyber / Certificate-Authority-Situational-Awareness
  Identifies unexpected and prohibited certificate authority certificates on Windows systems. #nsacyber
  ☆112Updated 8 years ago
• nsacyber / unfetter
  Identifies defensive gaps in security posture by leveraging Mitre's ATT&CK framework. #nsacyber
  ☆163Updated 4 years ago
• nsacyber / Pass-the-Hash-Guidance
  Configuration guidance for implementing Pass-the-Hash mitigations. #nsacyber
  ☆199Updated 8 years ago
• nsacyber / WALKOFF-Apps
  WALKOFF-enabled applications. #nsacyber
  ☆144Updated 6 years ago
• oneoffdallas / check_ioc
  Check_ioc is a script to check for various, selectable indicators of compromise on Windows systems via PowerShell and Event Logs. It was …
  ☆77Updated 7 years ago
• capesstack / capes
  Cyber Analytics Platform and Examination System (CAPES) Project Page
  ☆60Updated 5 years ago
• tenable / Posh-Nessus
  PowerShell Module for automating Tenable Nessus Vulnerability Scanner.
  ☆88Updated 2 years ago
• nsacyber / AppLocker-Guidance
  Configuration guidance for implementing application whitelisting with AppLocker. #nsacyber
  ☆212Updated last month
• CrowdStrike / falcon-orchestrator
  CrowdStrike Falcon Orchestrator provides automated workflow and response capabilities
  ☆186Updated last year
• adhdproject / buildkit
  ☆73Updated 7 years ago
• STIXProject / Tools
  STIX Tools & Scripts
  ☆47Updated 11 years ago
• mitre / SystemInspector
  SystemInspector is a script to pull a majority of the security-relevant files and settings from a system.
  ☆18Updated 6 years ago
• MotiBa / Sysmon
  Sysmon configuration
  ☆65Updated 6 years ago
• SMAPPER / NXLog-AutoConfig
  ☆49Updated 4 years ago
• MHaggis / sysmon-splunk-app
  Sysmon Splunk App
  ☆46Updated 6 years ago
• Foundstone / InvestigationPlaybookSpec
  InvestigationPlaybookSpec
  ☆72Updated 7 years ago
• vmware-archive / cb-reporting
  Report Generation from the Carbon Black REST API
  ☆15Updated 3 years ago
• exp0se / harbinger
  Harbinger Threat Intelligence
  ☆83Updated 9 years ago
• sethhall / bro-apt1
  This is a script module for Bro that encapsulates and detects activity related to the Mandiant APT1 report.
  ☆47Updated 11 years ago
• nsacyber / BitLocker-Guidance
  Configuration guidance for implementing BitLocker. #nsacyber
  ☆120Updated 5 years ago
• Pwdrkeg / honeyport
  A powershell script for creating a Windows honeyport.
  ☆89Updated 3 weeks ago
• sandialabs / scot
  Sandia Cyber Omni Tracker (SCOT)
  ☆246Updated 5 months ago
• et0x / Incident-Response
  ☆36Updated 8 years ago
• aboutsecurity / rastrea2r
  Collecting & Hunting for IOCs with gusto and style
  ☆116Updated 6 years ago
• Security-Onion-Solutions / securityonion-setup
  ☆36Updated 4 years ago
• vmware-archive / bit9platform
  Bit9 Platform
  ☆20Updated 7 years ago
• nsacyber / PRUNE
  Logs key Windows process performance metrics. #nsacyber
  ☆66Updated 2 years ago
• EmersonElectricCo / boomerang
  A tool designed for consistent and safe capture of off network web resources.
  ☆37Updated 8 years ago
• carbonblack / cb-taxii-connector
  Connector for pulling and converting STIX information from TAXII Service Providers into CB Feeds.
  ☆15Updated 2 years ago