ryanplasma / awesome-splunk-phantom
A collection of awesome resources built for and around the Splunk Phantom platform.
☆15Updated 4 years ago
Alternatives and similar repositories for awesome-splunk-phantom:
Users that are interested in awesome-splunk-phantom are comparing it to the libraries listed below
- ☆55Updated 3 years ago
- Auxiliary scripts for Incident Response with ELK☆11Updated 9 years ago
- InvestigationPlaybookSpec☆72Updated 7 years ago
- CrowdStrike Threat Intelligence☆34Updated 2 years ago
- irCRpull is a PowerShell script utilized to pull several system artifacts, utilizing the free tool CrowdResponse, from a live Win7+ syste…☆14Updated 10 years ago
- Test harness for a more pleasurable app building experience☆14Updated 4 years ago
- ☆39Updated 5 years ago
- pollen - A command-line tool for interacting with TheHive☆35Updated 5 years ago
- A Splunk app with saved reports derived from Sigma rules☆73Updated 6 years ago
- Provides detection capabilities and log conversion to evtx or syslog capabilities☆52Updated 2 years ago
- Repository for all cbapi example scripts☆16Updated 6 years ago
- scripts to configure the Splunk Universal Forwarder in a locked down state☆40Updated 6 years ago
- Splunk App to assist Sysmon Threat Hunting☆38Updated 8 years ago
- ☆12Updated 5 years ago
- Indices for courses in SANS' Network Security Operations curriculum☆15Updated 9 years ago
- Command line interface to Carbon Black Response☆38Updated 4 years ago
- ☆23Updated 5 years ago
- Deploy and maintain Symon through the Splunk Deployment Sever☆31Updated 4 years ago
- Bro PCAP Processing and Tagging API☆28Updated 7 years ago
- Sysmon Splunk App☆46Updated 6 years ago
- Bro IDS + ELK Stack to detect and block data exfiltration☆46Updated 6 years ago
- Utilizing your Threat data from a MISP instance into CarbonBlack Response by exposing the data in the Threat Intelligence Feed.☆19Updated 2 years ago
- Git for me to put all my forensics stuff☆21Updated 2 months ago
- This repository is a curated list of pro bono incident response entities.☆20Updated last year
- Synopsis is a tool to aid analysts reviewing browser history files by providing a high-level “synopsis” of key information.☆21Updated 6 years ago
- Tool to parse SRU database☆24Updated 7 years ago
- Expert Investigation Guides☆51Updated 4 years ago
- ASN Lookup Generator for Splunk☆10Updated last year
- Python script to automatically create sigma rules from The hive observables☆24Updated 6 years ago
- Actionable analytics designed to combat threats based on MITRE's ATT&CK.☆22Updated 5 years ago