splunk / attack_range
A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk
☆2,283Updated this week
Alternatives and similar repositories for attack_range
Users that are interested in attack_range are comparing it to the libraries listed below
Sorting:
- Splunk Security Content☆1,416Updated this week
- Detect Tactics, Techniques & Combat Threats☆2,155Updated last week
- Re-play Security Events☆1,641Updated last year
- Windows Events Attack Samples☆2,356Updated 2 years ago
- ☆2,269Updated last year
- A Splunk app mapped to MITRE ATT&CK to guide your threat hunts☆1,156Updated last year
- An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.☆1,887Updated last year
- Invoke-AtomicRedTeam is a PowerShell module to execute tests as defined in the [atomics folder](https://github.com/redcanaryco/atomic-red…☆906Updated 2 weeks ago
- VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities a…☆1,467Updated 2 weeks ago
- An informational repo about hunting for adversaries in your IT environment.☆1,775Updated 3 years ago
- Web app that provides basic navigation and annotation of ATT&CK matrices☆2,132Updated 3 weeks ago
- Open Source Security Events Metadata (OSSEM)☆1,266Updated 2 years ago
- Cyber Analytics Repository☆937Updated this week
- Actionable analytics designed to combat threats☆982Updated 2 years ago
- A repository of curated datasets from various attacks☆648Updated this week
- A repository of sysmon configuration modules☆2,774Updated 8 months ago
- A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more e…☆4,211Updated last year
- Cyber Threat Intelligence Repository expressed in STIX 2.0☆1,849Updated last week
- A collection of resources for Threat Hunters☆881Updated 7 months ago
- Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders☆903Updated last year
- Automate the creation of a lab environment complete with security tooling and logging best practices☆4,747Updated 10 months ago
- Configuration files for the SOF-ELK VM☆1,583Updated last month
- This project aims to compare and evaluate the telemetry of various EDR products.☆1,795Updated last week
- Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK☆1,067Updated 5 months ago
- A knowledge base of actionable Incident Response techniques☆636Updated 2 years ago
- A Powershell incident response framework☆1,601Updated 2 years ago
- A utility to safely generate malicious network traffic patterns and evaluate controls.☆1,306Updated last year
- A curated Cyber "Security Orchestration, Automation and Response (SOAR)" awesome list.☆865Updated 8 months ago
- Scripts and a (future) library to improve users' interactions with the ATT&CK content☆585Updated last year
- Cortex: a Powerful Observable Analysis and Active Response Engine☆1,422Updated 6 months ago