sttor / awesome-osquery
Osquery Resources
☆60Updated 5 years ago
Related projects ⓘ
Alternatives and complementary repositories for awesome-osquery
- Cisco Orbital - Osquery queries by Talos☆123Updated 3 months ago
- Threat Hunting & Incident Investigation with Osquery☆198Updated 2 years ago
- Recon Hunt Queries☆75Updated 3 years ago
- Sigma Detection Rule Repository☆85Updated 4 years ago
- A community event for security researchers to share their favorite notebooks☆106Updated 9 months ago
- Technical add-on for Splunk related to TheHive/Cortex from TheHive project☆49Updated 3 weeks ago
- A curated list of awesome things related to TheHive & Cortex☆173Updated 3 years ago
- SIEGMA - Transform Sigma rules into SIEM consumables☆141Updated last year
- Import specific data sources into the Sigma generic and open signature format.☆77Updated 2 years ago
- A Splunk App containing Sigma detection rules, which can be updated from a Git repository.☆107Updated 4 years ago
- Automatically create YARA rules from malicious documents.☆207Updated 2 years ago
- SOC Workflow App helps Security Analysts and Threat Hunters explore suspicious events, look into raw events arriving at the Elastic Stack…☆92Updated 2 years ago
- A Linux Auditd rule set mapped to MITRE's Attack Framework☆90Updated last year
- Synthetic Adversarial Log Objects: A Framework for synthentic log generation☆77Updated 10 months ago
- ☆34Updated 3 years ago
- Controls Assessment Specification☆65Updated 5 months ago
- Python library for threat intelligence☆80Updated 4 months ago
- OSSEM Common Data Model☆54Updated 2 years ago
- An example of how to deploy a Detection as Code pipeline using Sigma Rules, Sigmac, Gitlab CI, and Splunk.☆49Updated 2 years ago
- Automated testing, generation & manipulation of #osquery packs☆70Updated last month
- Threat Detection & Anomaly Detection rules for popular open-source components☆50Updated 2 years ago
- AWS EKS Cluster Forensics☆22Updated 3 years ago
- Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service - https…☆125Updated last year
- LOKI2 - Simple IOC and YARA Scanner☆80Updated 3 months ago
- The Infosec Community Definitive Guide to Jupyter Notebooks☆115Updated 4 years ago
- All-in-one bundle of MISP, TheHive and Cortex☆169Updated 2 years ago
- ☆114Updated last year
- misp-cloud - Cloud-ready images of MISP☆72Updated 2 years ago