socfortress / SOCFortress-Threat-IntelLinks
Integrate your Wazuh-Manager or Graylog with the SOCFortress Threat Intel Service
☆32Updated last year
Alternatives and similar repositories for SOCFortress-Threat-Intel
Users that are interested in SOCFortress-Threat-Intel are comparing it to the libraries listed below
Sorting:
- ☆40Updated 2 years ago
- Repo to hold wazuh manager mcp server☆71Updated 4 months ago
- The Enhanced MITRE ATT&CK® Coverage Tracker is an Excel tool for SOCs to measure and improve detection coverage of cyber threats. It simp…☆34Updated 2 months ago
- Useful scripts for those administering Wazuh☆91Updated 2 weeks ago
- A production ready Dockered MISP☆309Updated this week
- MISP Playbooks☆222Updated 3 months ago
- Docker image for Velocidex Velociraptor☆142Updated 3 weeks ago
- ☆219Updated last year
- Open Source SIEM Stack☆136Updated last month
- Roota is a public-domain language of threat detection and response that combines native queries from a SIEM, EDR, XDR, or Data Lake with …☆132Updated last year
- Playbook-NG is a stateless web-based application used to match incident findings with countermeasures for adversary containment and evict…☆156Updated last month
- Personal scripts☆15Updated last year
- This repository contains various threat hunting tools written in Python and is documented in the series Python Threat Hunting Tools which…☆18Updated 2 years ago
- A collection of various SIEM rules relating to malware family groups.☆70Updated last year
- Run Velociraptor on Security Onion☆40Updated 3 years ago
- Security Onion + Automation + Response Lab including n8n and Velociraptor☆112Updated 3 years ago
- ☆47Updated 3 years ago
- A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.☆162Updated 9 months ago
- ☆20Updated 3 years ago
- Wazuh integration TheHive☆41Updated 2 years ago
- Incident Response documents and tooling☆111Updated last month
- This repository contains Splunk queries to hunt some anomalies☆46Updated 3 years ago
- CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable repor…☆276Updated 10 months ago
- Tools for simulating threats☆199Updated 2 years ago
- SOARCA - The Open Source CACAO-based Security Orchestrator!☆100Updated last month
- MISP to Sentinel integration☆79Updated last month
- Practical Threat Detection Engineering, Published by Packt☆83Updated 2 years ago
- ☆96Updated 2 weeks ago
- ☆22Updated 3 years ago
- A free and open platform for detecting and preventing email attacks like BEC, malware, and credential phishing. Gain visibility and contr…☆244Updated last month