sophos / sophos-central-api-connectorLinks
Leverage Sophos Central API
☆30Updated 2 years ago
Alternatives and similar repositories for sophos-central-api-connector
Users that are interested in sophos-central-api-connector are comparing it to the libraries listed below
Sorting:
- ☆88Updated 10 months ago
- Beacon Kibana Executable Report. Aggregates Sysmon Network Events With Elasticsearch and Kibana☆298Updated 2 months ago
- Real-time Response scripts and schema☆121Updated 3 months ago
- A Windows event logging and collection baseline focused on finding balance between forensic value and optimising retention.☆291Updated 4 years ago
- Run zeek with zeekctl in docker☆62Updated last year
- LogRhythm PowerShell Toolkit☆53Updated 3 weeks ago
- Run Velociraptor on Security Onion☆40Updated 3 years ago
- Windows Event Forwarding subscriptions, configuration files and scripts that assist with implementing ACSC's protect publication, Technic…☆227Updated 11 months ago
- Sysmon and wazuh integration with Sigma sysmon rules [updated]☆71Updated 4 years ago
- Endpoint detection for remote hosts for consumption by RITA and Elasticsearch☆79Updated 3 months ago
- A list of my personal projects☆177Updated 3 years ago
- Passive service locator, a python sniffer that identifies servers, clients, names and much more☆258Updated 2 years ago
- Repository of SentinelOne Deep Visibility queries.☆135Updated 4 years ago
- ☆67Updated 2 years ago
- ☆58Updated 4 months ago
- ☆82Updated last year
- Simple integration script for 3rd party systems such as SIEMs. Offers command line, file or syslog output in CEF, JSON or key-value pair …☆137Updated 2 years ago
- Elastic Beat for fetching and shipping Office 365 audit events☆68Updated 5 years ago
- The Business Email Compromise Guide sets out to describe 10 steps for performing a Business Email Compromise (BEC) investigation in an Of…☆277Updated 5 years ago
- Unofficial third-party scripts, playbooks, and content for IBM QRadar & QRadar Community Edition.☆87Updated 8 months ago
- SIEGMA - Transform Sigma rules into SIEM consumables☆158Updated 10 months ago
- Tools for simulating threats☆199Updated 2 years ago
- This is a repository for freq.py and freq_server.py☆212Updated 5 years ago
- PowerShell module for Office 365 and Azure log collection☆280Updated 4 months ago
- A cross-platform baselining, threat hunting, and attack surface analysis tool for security teams.☆253Updated 10 months ago
- Zeek Log Cheatsheets☆302Updated 5 months ago
- The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL)☆266Updated 3 years ago
- Convert Sigma rules to Wazuh rules☆73Updated 4 months ago
- Developer enhancements (DX) for FalconPy, the CrowdStrike Python SDK☆45Updated last week
- This was code for analyzing round 1 of the MITRE Enterprise ATT&CK Evaluation. Please check out https://github.com/joshzelonis/Enterprise…☆94Updated 5 years ago