A Triage Agent for reducing junior analyst manual activiites
☆49May 11, 2026Updated 6 months ago
Alternatives and similar repositories for SIEMTriage
Users that are interested in SIEMTriage are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A Model Context Protocol (MCP) server that provides tools for working with the MITRE ATT&CK framework using the mitreattack-python librar…☆15Oct 30, 2026Updated last week
- MCP server for incident response in AWS☆18Sep 2, 2025Updated last year
- Miscellaneous stuff I create☆76Oct 21, 2026Updated 3 weeks ago
- SOCAutomators Substack blog companion — threat research, DBIR analysis, and security operations content☆21Oct 30, 2026Updated last week
- Rules shared by the community from 100 Days of YARA 2026☆12Apr 16, 2026Updated 6 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Curated Microsoft Security skills for AI agents - Defender, Sentinel, Entra, Purview, Intune, Security Copilot☆180Oct 29, 2026Updated 2 weeks ago
- PowerShell-Integrity-FIM☆12Jan 17, 2024Updated 2 years ago
- A schema-aware dataset and Claude AI skill for Microsoft Defender XDR Advanced Hunting.☆36May 6, 2026Updated 6 months ago
- MISP to Sentinel integration☆80Jul 4, 2026Updated 4 months ago
- MCP to help Defenders Detection Engineer Harder and Smarter☆525Nov 4, 2026Updated last week
- Policy-driven security proxy for LLM. Inspect and block dangerous code in real time.☆12Apr 4, 2026Updated 7 months ago
- A Dead-Simple, Bulletproof Way to Create and Run Scheduled Agents☆13Jun 29, 2026Updated 4 months ago
- A Microsoft Sentinel toolkit for generating and ingesting **realistic sample data** into Log Analytics tables via the Azure Monitor Logs …☆21Oct 1, 2026Updated last month
- Rethink Secure Score: risk-based scoring across Defender XDR, Entra, AD, Azure, ExposureGraph, and Shodan — weighted by consequence, Tier…☆45Updated this week
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- An automation framework for deploying Microsoft Sentinel environments using pipelines. This project combines infrastructure-as-code (Bice…☆82Updated this week
- ☆10Nov 3, 2025Updated last year
- Vigil SOC: The leading open source AI SOC. Apache 2.0. Runs against your own LLM, local or remote.☆433Updated this week
- This operational dashboard correlates data from Microsoft Defender for Endpoint/Server (MDE) and Azure Monitor Agent (AMA) to identify co…☆19Oct 30, 2026Updated last week
- This project contains a **test executable** specifically designed to trigger incidents in **Microsoft Defender for Endpoint (MDE)**. It…☆14Jul 20, 2025Updated last year
- KustoHawk is a lightweight incident triage and response tool designed for effective incident response in Microsoft Defender XDR and Micro…☆161Apr 1, 2026Updated 7 months ago
- Sentinel Logic Apps, Playbooks and Workbooks to automate enrichment, incident analysis and more.☆126Jan 18, 2026Updated 9 months ago
- ClientInspectorV2 - Unleashing the power of Azure LogAnalytics, Azure Data Collection Rules, Log Ingestion API by doing client inventory …☆28Nov 2, 2026Updated last week
- IntuneAutomate - FREE Community Intune toolset designed for Automating key Intune tasks☆25Updated this week
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- ☆14Updated this week
- Contains the source code for Shieldchecker.☆16Jul 17, 2026Updated 3 months ago
- This project is a sophisticated **Model Context Protocol (MCP) server** for Microsoft Graph Security API Incident and Alert management☆15Jun 9, 2025Updated last year
- Agent Skills for work with real decisions, evidence, systems, and consequences.☆21Sep 4, 2026Updated 2 months ago
- Automated security investigation tool using Microsoft MCP Servers, GitHub Copilot, Python Modules and custom copilot-instructions.☆253Updated this week
- Public Repository of Open Source Tools for Cyber Threat Intelligence Analysts and Researchers☆19Sep 24, 2026Updated last month
- Assess, convert and deploy Microsoft Sentinel analytics rules as Defender XDR custom detections☆18Sep 29, 2026Updated last month
- A mirror image of my detection rules☆170Oct 31, 2026Updated last week
- ☆72Apr 20, 2026Updated 6 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Digital Forensic Analysis and Incident Response Playbooks to handle real world security incidents☆56Apr 25, 2024Updated 2 years ago
- This repository contains scripts designed to streamline and simplify workflows for purple/blue/red teamers, making day-to-day operations …☆13Jul 18, 2026Updated 3 months ago
- Lateral Movement and Data Access artifacts for Velociraptor☆17Dec 2, 2025Updated 11 months ago
- Run TTPs, with AI!☆144Feb 23, 2026Updated 8 months ago
- Fully functional, from-scratch alternative to the Cobalt Strike Beacon (red teaming tool), offering transparency and flexibility for secu…☆10Mar 13, 2024Updated 2 years ago
- Nova Rules Collection - Official rules for Nova Framework prompt pattern matching☆20Sep 21, 2026Updated last month
- IR drill plateform☆23Jul 29, 2025Updated last year
Are these results useful?