splunk / botsv3Links
Splunk Boss of the SOC version 3 dataset.
☆345Updated 5 years ago
Alternatives and similar repositories for botsv3
Users that are interested in botsv3 are comparing it to the libraries listed below
Sorting:
- Splunk Boss of the SOC version 2 dataset.☆384Updated 2 years ago
- ☆402Updated 10 months ago
- A repository of curated datasets from various attacks☆655Updated last week
- Cyber Incident Response Team Playbook Battle Cards☆380Updated last year
- Set of SIGMA rules (>350) mapped to MITRE ATT&CK tactic and techniques☆369Updated 5 months ago
- Splunk code (SPL) for serious threat hunters and detection engineers.☆284Updated last year
- A collection of Splunk's Search Processing Language (SPL) for Threat Hunting with CrowdStrike Falcon☆205Updated 5 years ago
- Purple Team Exercise Framework☆715Updated last year
- Set of EVTX samples (>270) mapped to MITRE ATT&CK tactic and techniques to measure your SIEM coverage or developed new use cases.☆577Updated 5 months ago
- Home for Splunk security datasets.☆125Updated 5 years ago
- A knowledge base of actionable Incident Response techniques☆641Updated 3 years ago
- Indexes for SANS Courses and GIAC Certifications☆253Updated last year
- This content is analysis and research of the data sources currently listed in ATT&CK.☆412Updated last year
- Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders☆913Updated last year
- Automation scripts to deploy Windows Event Forwarding, Sysmon, and custom audit policies in an Active Directory environment.☆482Updated 7 months ago
- Scripts and a (future) library to improve users' interactions with the ATT&CK content☆585Updated last year
- A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters …☆258Updated this week
- This repository contains Community and Field contributed content for LogScale☆244Updated 3 weeks ago
- Consolidation of various resources related to Microsoft Sysmon & sample data/log☆110Updated 3 years ago
- CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable repor…☆256Updated 3 months ago
- Tools for simulating threats☆186Updated last year
- A set of Zeek scripts to detect ATT&CK techniques.☆594Updated 11 months ago
- Atomic Purple Team Framework and Lifecycle☆298Updated 4 years ago
- DetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.☆563Updated 3 years ago
- Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).☆733Updated 3 months ago
- Documentation and scripts to properly enable Windows event logs.☆616Updated last year
- A Splunk app mapped to MITRE ATT&CK to guide your threat hunts☆1,158Updated last year
- A list of Splunk queries that I've collected and used over time.☆85Updated 4 years ago
- Open Source Security Operations Center Documentation☆188Updated last month
- Invoke-AtomicRedTeam is a PowerShell module to execute tests as defined in the [atomics folder](https://github.com/redcanaryco/atomic-red…☆917Updated last month