Alternatives and similar repositories for SOCFortress-Threat-Intel

Users that are interested in SOCFortress-Threat-Intel are comparing it to the libraries listed below

• juaromu / wazuh-opencti
  ☆35Updated last year
• quitehacker / MITRE-ATTACK-Enterprise-Matrix-in-Excel-for-SOC
  The Enhanced MITRE ATT&CK® Coverage Tracker is an Excel tool for SOCs to measure and improve detection coverage of cyber threats. It simp…
  ☆26Updated 5 months ago
• kraven-security / python-threat-hunting-tools
  This repository contains various threat hunting tools written in Python and is documented in the series Python Threat Hunting Tools which…
  ☆15Updated last year
• reversinglabs / reversinglabs-siem-rules
  A collection of various SIEM rules relating to malware family groups.
  ☆66Updated last year
• weslambert / securityonion-velociraptor
  Run Velociraptor on Security Onion
  ☆38Updated 2 years ago
• tidalcyber / cyber-threat-profiling
  A library of reference materials, tools, and other resources to aid threat profiling, threat quantification, and cyber adversary defense
  ☆90Updated last year
• UncoderIO / Roota
  Roota is a public-domain language of threat detection and response that combines native queries from a SIEM, EDR, XDR, or Data Lake with …
  ☆128Updated 11 months ago
• securityjoes / ForensicMiner
  A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.
  ☆155Updated 2 months ago
• MHaggis / ClickGrab
  Finding ClickFix and FakeCAPTCHA like it's 1999
  ☆40Updated this week
• AttackIQ / DetectIQ
  ☆105Updated last month
• MISP / misp-playbooks
  MISP Playbooks
  ☆203Updated 2 weeks ago
• curated-intel / The-CTI-Research-Guide
  A repository to help CTI teams tackle the challenges around collection and research by providing guidance from experienced practitioners
  ☆96Updated 7 months ago
• redhat-infosec / priority-intelligence-requirements-dev
  This guide describes a process for developing Cyber Threat Intelligence Priority Intelligence Requirements
  ☆122Updated last year
• Ahmed-AL-Maghraby / SIEM-Cheat-Sheet
  SIEM Cheat Sheet
  ☆74Updated last year
• cudeso / misp-tip-of-the-week
  A collection of tips for using MISP.
  ☆74Updated 6 months ago
• dfir-dd / incident-response-playbooks
  Digital Forensic Analysis and Incident Response Playbooks to handle real world security incidents
  ☆44Updated last year
• activecm / threat-tools
  Tools for simulating threats
  ☆186Updated last year
• activecm / espy
  Endpoint detection for remote hosts for consumption by RITA and Elasticsearch
  ☆70Updated 2 years ago
• korniko98 / pivot-atlas
  ☆92Updated last month
• signorrayan / SplunkThreatHunting
  This repository contains Splunk queries to hunt some anomalies
  ☆43Updated 2 years ago
• cudeso / misp2sentinel
  MISP to Sentinel integration
  ☆68Updated 2 weeks ago
• crow1011 / wazuh2thehive
  Wazuh integration TheHive
  ☆36Updated 2 years ago
• tsale / EDR-Telemetry-Website
  ☆74Updated 3 weeks ago
• SigmaHQ / pySigma-backend-crowdstrike
  SigmaHQ pySigma CrowdStrike processing pipeline
  ☆26Updated 8 months ago
• Mikoyan-Dee / CrowdStrike-Queries
  CrowdStrike Falcon Queries For Advanced Threat Detection
  ☆19Updated 3 months ago
• archanchoudhury / DFIR-Tools
  This is the One Stop place where you can find almost all of your Tools of Requirements in DFIR
  ☆78Updated 3 years ago
• center-for-threat-informed-defense / summiting-the-pyramid
  Summiting the Pyramid is a research project focused on engineering cyber analytics to make adversary evasion more difficult. The research…
  ☆42Updated last month
• juaromu / wazuh-misp
  ☆17Updated 2 years ago
• CERN-CERT / pDNSSOC
  Leveraging MISP indicators via a pDNS-based infrastructure as a poor man’s SOC.
  ☆51Updated 5 months ago
• dariommr / scripts
  Personal scripts
  ☆15Updated 9 months ago