sttor / osquery-wazuh-response
Active Response plugin. Osquery to execute wazuh/ossec active response plugins. You can write your own plugins, easy to plug
☆9Updated 4 years ago
Alternatives and similar repositories for osquery-wazuh-response:
Users that are interested in osquery-wazuh-response are comparing it to the libraries listed below
- Documentation used for Shuffle☆19Updated this week
- defendA Data Lake. A firehose pipeline to athena providing enrichment and normalization for security events☆16Updated last year
- A few quick recipes for those that do not have much time during the day☆22Updated 3 months ago
- Osquery Packs we use for customer security hardening☆12Updated 4 months ago
- Legal, procedural and policies document templates for operating MISP and information sharing communities☆37Updated 2 years ago
- Kestrel Jupyter Notebook Kernel☆9Updated last year
- OSSEM Common Data Model☆55Updated 2 years ago
- ☆11Updated 3 years ago
- Sharing Threat Hunting runbooks☆25Updated 5 years ago
- Workflows for Shuffle☆21Updated 2 years ago
- Threat Detection & Anomaly Detection rules for popular open-source components☆50Updated 2 years ago
- Rapid cybersecurity toolkit based on Elastic in Docker. Designed to quickly build elastic-based environments to analyze and execute threa…☆18Updated 4 years ago
- A catalog designed for environments with multiple or diffuse Information Security vulnerability-related information sources.☆12Updated last year
- Contextal Platform, a powerful, open-source cybersecurity solution designed for contextual threat detection and intelligence.☆25Updated 3 weeks ago
- Best practices in threat intelligence☆46Updated 2 years ago
- A modern CLI for Tenable.io written in Go☆14Updated 4 years ago
- Build Automated Machine Images for MISP☆28Updated last year
- ☆12Updated 3 months ago
- Security Alert Decoration☆26Updated 3 weeks ago
- Threat hunting repo for my independent study on threat hunting with OSQuery☆28Updated 7 years ago
- DefectDojo Community Content☆17Updated 4 months ago
- Defending IaaS with ATT&CK is a project to create a collection of ATT&CK techniques relevant to a Linux IaaS environment, as well as a me…☆13Updated 11 months ago
- Tool to check compliance with CIS Linux Benchmarks, specifically Distribution Independent, Debian 9 and Ubuntu 18.04 LTS, and generate sp…☆24Updated 4 years ago
- Core incident handling plugins for aws_ir cli, incident pony, and more.☆21Updated 6 years ago
- Actionable analytics designed to combat threats based on MITRE's ATT&CK.☆22Updated 5 years ago
- OSCAL SSP content for technologies shipped by Red Hat☆15Updated last year
- Wazuh - Chef cookbooks☆22Updated last year
- A collection of dashboards, templates, API's and Power BI code for vulnerability management and analysis☆15Updated 2 weeks ago
- Mapping Corelight or Zeek data to Elastic Common Schema fields☆34Updated 2 weeks ago
- AWS EKS Cluster Forensics☆23Updated 3 years ago