Deploy and maintain Symon through the Splunk Deployment Sever
☆32Jul 30, 2020Updated 6 years ago
Alternatives and similar repositories for TA-Sysmon-deploy
Users that are interested in TA-Sysmon-deploy are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Sysmon Tools for PowerShell☆233Aug 17, 2018Updated 8 years ago
- DNS Dashboard for hunting and identifying beaconing☆17Jul 29, 2020Updated 6 years ago
- Splunk App to assist Sysmon Threat Hunting☆37Mar 7, 2017Updated 9 years ago
- Technical add-on to ingest json formatted volatility memory analysis plugin outputs☆13May 21, 2018Updated 8 years ago
- Sysmon Splunk App☆48Sep 16, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆14Feb 8, 2020Updated 6 years ago
- ☆14Nov 12, 2021Updated 4 years ago
- Detecting DNS Spoofing, DNS Tunneling, DNS Exfiltration☆36Sep 28, 2015Updated 10 years ago
- Splunk app for Threat hunting☆15Nov 15, 2018Updated 7 years ago
- A simple DNS exfiltration script☆11Apr 17, 2023Updated 3 years ago
- This TA takes Suricata5 data from your port mirrored Suricata server and makes it readable within Splunk. See Cheatsheets on how to setup…☆15Sep 5, 2020Updated 6 years ago
- A few scripts I put together for testing purposes and to automate a few capabilities while doing IR. These scripts are also part of my bl…☆54Jan 24, 2018Updated 8 years ago
- A flexible, easy to use, automation framework allowing users to integrate their capabilities and devices to cut through the repetitive, t…☆12Nov 23, 2022Updated 3 years ago
- Matt's DFIR blog☆14Jun 23, 2026Updated 3 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Splunk code (SPL) for serious threat hunters and detection engineers.☆294Jan 15, 2024Updated 2 years ago
- Audit Powershell and search from known keywords in history #Blueteam☆25Apr 22, 2020Updated 6 years ago
- TheHiveIRPlaybook is a collection of TheHive case templates used for Incident Response☆13Jul 13, 2020Updated 6 years ago
- PowerShell Script for Agentless Incident Response☆25Apr 5, 2018Updated 8 years ago
- ☆13Feb 6, 2018Updated 8 years ago
- Tool to extract Sessions, MessageID(s) and find the emails belonging to MessageID(s). This script utilizes the MailItemsAccessed features…☆43Oct 20, 2020Updated 5 years ago
- Ansible playbooks for configuring and managing Splunk Cloud deployments with the Admin Config Service (ACS) API☆32Sep 14, 2026Updated last week
- incident response scripts☆18Mar 4, 2019Updated 7 years ago
- A repository of sysmon configuration modules☆3,142Sep 18, 2026Updated last week
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Guidance on deploying Splunk Enterprise on Azure with automated reference implementation☆31Mar 13, 2023Updated 3 years ago
- Detect possible sysmon logging bypasses given a specific configuration☆110Dec 26, 2018Updated 7 years ago
- A Splunk app with saved reports derived from Sigma rules☆73Apr 24, 2018Updated 8 years ago
- Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.☆944Dec 12, 2023Updated 2 years ago
- A free incident response management and documentation workbook☆25Nov 13, 2018Updated 7 years ago
- This repository was created to aid in the deployment/maintenance of the Sysmon service on a large number of computers.☆83Mar 20, 2023Updated 3 years ago
- Investigate suspicious activity by visualizing Sysmon's event log☆433Dec 22, 2023Updated 2 years ago
- Local Maltego Transforms for crt.sh☆12Sep 8, 2017Updated 9 years ago
- ☆13Nov 24, 2019Updated 6 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Automated Use Case Testing☆172May 1, 2018Updated 8 years ago
- Splunk Technology-AddOn for Aurora Sigma-Based EDR Agent. It helps parse and configure the necessary inputs to neatly consume Aurora EDR …☆13Sep 27, 2022Updated 4 years ago
- This is a Shell Script to setup NTLM hash sniffing using the Raspberry Pi Zero. This tool can be used during Red Team assessments by atta…☆23Jun 7, 2017Updated 9 years ago
- ☆17Jun 8, 2018Updated 8 years ago
- Fake SMB and SAMR data☆12Oct 27, 2019Updated 6 years ago
- Python API for the LimaCharlie.io service.☆23Updated this week
- Lists of sources and utilities utilized to hunt, detect and prevent evildoers.☆172Dec 10, 2018Updated 7 years ago