Alternatives and similar repositories for iris-velociraptorartifact-module

Users that are interested in iris-velociraptorartifact-module are comparing it to the libraries listed below

• weslambert / velociraptor-docker
  Docker image for Velocidex Velociraptor
  ☆126Updated 2 months ago
• MISP / misp-docker
  A production ready Dockered MISP
  ☆237Updated 2 weeks ago
• magicsword-io / sigconverter.io
  An opensource sigma conversion tool built using pysigma
  ☆129Updated 5 months ago
• mdecrevoisier / SIGMA-detection-rules
  Set of SIGMA rules (>350) mapped to MITRE ATT&CK tactic and techniques
  ☆364Updated 4 months ago
• MISP / misp-playbooks
  MISP Playbooks
  ☆201Updated 3 months ago
• center-for-threat-informed-defense / cti-blueprints
  CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable repor…
  ☆253Updated 2 months ago
• docintelapp / DocIntel
  Open Source Platform for storing, organizing, and searching documents related to cyber threats
  ☆165Updated last year
• Yamato-Security / hayabusa-rules
  Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.
  ☆180Updated this week
• socfortress / CoPilot
  SOCFortress CoPilot
  ☆280Updated this week
• mbabinski / Sigma-Rules
  A repository of my own Sigma detection rules.
  ☆160Updated 8 months ago
• madirish / ossocdocs
  Open Source Security Operations Center Documentation
  ☆186Updated 3 weeks ago
• Xboarder56 / QRCE-Rules
  These are open source rules that can be utilized with QRadar to detect various types of threats in the environment.
  ☆55Updated 5 years ago
• UncoderIO / Uncoder_IO
  An IDE and translation engine for detection engineers and threat hunters. Be faster, write smarter, keep 100% privacy.
  ☆154Updated 3 months ago
• mgreen27 / DetectRaptor
  A repository to share publicly available Velociraptor detection content
  ☆170Updated this week
• mf1d3l / Splunk4DFIR
  Harness the power of Splunk for your investigations
  ☆107Updated 3 weeks ago
• The-DFIR-Report / Sigma-Rules
  Rules generated from our investigations.
  ☆195Updated this week
• OpenCTI-Platform / docker
  OpenCTI Docker deployment helpers
  ☆183Updated this week
• socfortress / SOCFortress-Threat-Intel
  Integrate your Wazuh-Manager or Graylog with the SOCFortress Threat Intel Service
  ☆29Updated 8 months ago
• NUKIB / misp
  Docker image for MISP
  ☆127Updated 2 weeks ago
• acquiredsecurity / Sentinel-One-STAR-Rules-Threat-Hunts
  SentinelOne STAR Rules
  ☆62Updated 3 months ago
• juaromu / wazuh-opencti
  ☆34Updated last year
• Hestat / ossec-sysmon
  A Ruleset to enhance detection capabilities of Ossec using Sysmon
  ☆92Updated 3 years ago
• TheHive-Project / Docker-Templates
  Docker configurations for TheHive, Cortex and 3rd party tools
  ☆124Updated 2 years ago
• V1D1AN / S1EM
  This project is a SIEM with SIRP and Threat Intel, all in one.
  ☆440Updated 6 months ago
• ControlCompass / ControlCompass.github.io
  Pointing cybersecurity teams to thousands of detection rules and offensive security tests aligned with common attacker techniques
  ☆133Updated last year
• nasbench / SIGMA-Resources
  Resources To Learn And Understand SIGMA Rules
  ☆175Updated 2 years ago
• siriussecurity / dettectinator
  Dettectinator - The Python library to your DeTT&CT YAML files.
  ☆113Updated last month
• cudeso / misp2sentinel
  MISP to Sentinel integration
  ☆67Updated last week
• LetMeR00t / TA-thehive-cortex
  Technical add-on for Splunk related to TheHive/Cortex from TheHive project
  ☆53Updated last month
• secure-cake / win-mal-investigations
  Windows Malware Investigation Scripts & Docs
  ☆83Updated 6 months ago