Splunk app for Threat hunting
☆15Nov 15, 2018Updated 7 years ago
Alternatives and similar repositories for SA-Threat-Hunting
Users that are interested in SA-Threat-Hunting are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Splunk Searches and Dashboards for DNS Threat Hunting☆11Mar 5, 2018Updated 8 years ago
- Python script to run battery of Volatility plugins against a forensic memory image☆10Jun 22, 2019Updated 7 years ago
- ☆12Mar 24, 2018Updated 8 years ago
- A WDAC configuration repository with the sole intention of enriching MDE☆30Jun 18, 2025Updated last year
- Set Operations App for Splunk☆10Mar 29, 2021Updated 5 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Basic demo for Hidden Treasure talk.☆49Nov 4, 2017Updated 8 years ago
- Splunk Technology Add-On (TA) for collecting ETW events from Windows systems☆15Dec 8, 2022Updated 3 years ago
- carcass is a Python package to generate python package scaffolding based on best practices☆17Jan 10, 2022Updated 4 years ago
- Exports MISP events to STIX and ingest into McAfee ESM☆15Feb 12, 2020Updated 6 years ago
- Sample queries for Advanced hunting in Windows Defender ATP☆12Apr 22, 2020Updated 6 years ago
- ☆15Mar 24, 2017Updated 9 years ago
- A collection of things I've created or found that I think is useful for Azure Sentinel.☆19Jul 8, 2026Updated 2 months ago
- Analytics for Accounting logs from Network devices☆18Mar 27, 2021Updated 5 years ago
- Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to fi…☆49May 31, 2017Updated 9 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Deploy and maintain Symon through the Splunk Deployment Sever☆32Jul 30, 2020Updated 6 years ago
- A central place for me to share interesting PSRemoting configurations☆16Jun 28, 2017Updated 9 years ago
- Sysmon Splunk App☆48Updated this week
- ☆12Nov 3, 2020Updated 5 years ago
- Heos Binding for OpenHab☆13Feb 1, 2019Updated 7 years ago
- Dashboards for conducting forensic investigation using windows events in Kibana☆18Apr 6, 2019Updated 7 years ago
- Windows OpenStack Heat templates☆14Apr 15, 2014Updated 12 years ago
- Konrads' Pen-Ultimate (Windows) Log File Parser☆14Dec 27, 2025Updated 8 months ago
- ☆52Mar 4, 2019Updated 7 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Small tools to assist with using Large Language Models☆12Nov 7, 2023Updated 2 years ago
- ☆55Mar 2, 2022Updated 4 years ago
- The Office 365 data Splunk app enables data analysts and IT administrators to import the data they need to get their organization more pr…☆16Jun 14, 2023Updated 3 years ago
- ☆13Feb 6, 2018Updated 8 years ago
- A simple ruby module using the ISCP protocol to control Onkyo Receivers from the command line. Tested on the TX-NR609 model.☆17Sep 15, 2012Updated 14 years ago
- CB API scripts for IR, administration, etc.☆32Jun 3, 2019Updated 7 years ago
- Volatility plugin to help identify DoublePulsar implant by listing the array of pointers SrvTransaction2DispatchTable from the srv.sys dr…☆16Aug 14, 2017Updated 9 years ago
- Argument Injection in Dragonfly Ruby Gem☆16May 26, 2021Updated 5 years ago
- ☆15Sep 24, 2024Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- An updated version Lady Ada's Wavebubble☆11May 30, 2013Updated 13 years ago
- A Splunk app with saved reports derived from Sigma rules☆73Apr 24, 2018Updated 8 years ago
- Ruins & Riches Ultima Online Server Files☆10Oct 15, 2023Updated 2 years ago
- ☆17Oct 26, 2021Updated 4 years ago
- In case you didn't now how to restore the user password after a password reset (get the previous hash with DCSync)☆172Jun 8, 2017Updated 9 years ago
- An Incident Response tool that visualizes historic process execution evidence (based on Event ID 4688 - Process Creation Event) in a tree…☆60Jan 30, 2018Updated 8 years ago
- Rules generated from our investigations.☆214Jul 8, 2026Updated 2 months ago