sroberts / responding-at-scale-with-osquery
Using osquery for Mass Incident Detection & Response
☆19Updated 8 years ago
Related projects ⓘ
Alternatives and complementary repositories for responding-at-scale-with-osquery
- CRITs IOC Visualization in Maltego☆28Updated 9 years ago
- Cli interface to threatcrowd.org☆19Updated 7 years ago
- Maltego Transform to put entities into MISP events☆26Updated 3 years ago
- Metadata Inspection Database Alerting System☆42Updated 11 years ago
- Cuckoo Sandbox Local Maltego Transforms Project☆49Updated 10 years ago
- How can you track the hunting techniques you come up with?☆13Updated 7 years ago
- FireEye Alert json files to MISP Malware information sharing plattform (Alpha)☆32Updated 7 years ago
- This repository is a curated list of pro bono incident response entities.☆19Updated last year
- Home to the ActorTrackr source code☆24Updated 7 years ago
- API to access the Redis database of a BGP Ranking instance.☆17Updated 6 years ago
- Threat Intelligence distribution☆30Updated 8 years ago
- Public Maltego Transforms☆23Updated 7 years ago
- Multiple rules for yara-project for detect compiler/packer/protector☆33Updated 4 years ago
- Automation for VirusTotal☆31Updated 8 years ago
- Yara Scanner For IMAP Feeds and saved Streams☆28Updated 5 years ago
- A Maltego transform and machine to identify possible phishing vectors using permutated domains☆15Updated 9 years ago
- Traceroute improved wrapper for CSIRT and CERT operators☆37Updated last month
- Build Automated Machine Images for MISP☆28Updated last year
- Web based analysis platform for use with the AWS_IR command line tool.☆17Updated 8 years ago
- Extract information from MISP via the API☆15Updated 8 years ago
- Detect malicious domain, Blablablablabla☆26Updated 7 years ago
- Useful scripts, rules etc. for use with YARA☆27Updated 3 years ago
- A set of templates for documenting threat intelligence☆73Updated 11 years ago
- Unpack MIME attachments from a file and check them against virustotal.com☆45Updated 8 years ago
- Basic Maltego Transforms for looking up SSL certs and IP info from censys.io☆41Updated 7 years ago
- The ContactDB project was initiated to cover the need for a tool to maintain contacts for CSIRT teams☆37Updated 2 years ago
- Python bindings for Yeti's API☆18Updated last year
- Maltego transforms for the ThreatCrowd search API☆46Updated 6 years ago
- API Tools☆27Updated 8 years ago