swiftbird07 / IRIS-SOARLinks
π IRIS-SOAR: Modular SOAR (Security Orchestration, Automation, and Response) implementation in Python. Designed to complement DFIR-IRIS through playbook automation and seamless integrations. Easily extensible and in active development. Join us in building a tool geared towards enhancing security efficiency!
β10Updated last year
Alternatives and similar repositories for IRIS-SOAR
Users that are interested in IRIS-SOAR are comparing it to the libraries listed below
Sorting:
- Repo for Automations and other solutions for Elastic SIEM/Security.β18Updated 4 years ago
- Workflows for Shuffleβ23Updated 2 years ago
- Threat Simulator for Enterprise Networksβ14Updated 3 years ago
- Rapid cybersecurity toolkit based on Elastic in Docker. Designed to quickly build elastic-based environments to analyze and execute threaβ¦β18Updated 5 years ago
- This repository provide a json file for all Windows security Event IDs with lot of useful informations (Categories, GPO, Volume, Recommanβ¦β11Updated 2 years ago
- The official Prelude SIEM GitHub of https://www.prelude-siem.orgβ33Updated 9 years ago
- A project that aims to automate Volatility3 at scale with the use of cloud strength and the power of KQL inside ADX.β16Updated last week
- Collection of Dashboards for Threat Hunting and more!β68Updated 4 years ago
- Import CrowdStrike Threat Intelligence into your instance of MISPβ48Updated 2 months ago
- Tool to extract Sessions, MessageID(s) and find the emails belonging to MessageID(s). This script utilizes the MailItemsAccessed featuresβ¦β41Updated 4 years ago
- Microsoft Sentinel, Defender for Endpoint - KQL Detection Packsβ55Updated 2 years ago
- A collection of various SIEM rules relating to malware family groups.β69Updated last year
- Hunting Queries for Defender ATPβ82Updated 4 months ago
- A collection of tips for using MISP.β74Updated 8 months ago
- The Infosec Community Definitive Guide to Jupyter Notebooksβ125Updated 4 years ago
- Domain Response is a tool that is designed to help you automate the investigation for a domain. This tool is specificly designed to automβ¦β49Updated this week
- Digital Forensic Analysis and Incident Response Playbooks to handle real world security incidentsβ46Updated last year
- Incident Response Network Toolsβ24Updated 4 years ago
- AIL project training materialsβ35Updated last month
- SIEM USE Case Selection Methodologyβ16Updated 4 years ago
- β73Updated 10 months ago
- REST server that can analyze Kusto KQL queries against the Sentinel and Microsoft 365 Defender schemas.β37Updated last week
- Bring Your Own Mitre Att&ck Β© Matrix !β13Updated last year
- An example of how to deploy a Detection as Code pipeline using Sigma Rules, Sigmac, Gitlab CI, and Splunk.β57Updated 3 years ago
- Security Scripts and Sources for daily usage.β65Updated 2 months ago
- A tool that allows you to document and assess any security automation in your SOCβ46Updated 9 months ago
- Defender Resource Hubβ28Updated last month
- Cheat sheets for threat hunting, detection and other stuff.β34Updated 2 years ago
- Azure function to insert MISP data in to Azure Sentinelβ32Updated 2 years ago
- pySigma Splunk backendβ41Updated 2 weeks ago