swiftbird07 / elastic-agent-android
🚀 Enterprise-grade Android Monitoring with Elastic: Streamline Fleet Management and Security Insights. 📊
☆10Updated last month
Alternatives and similar repositories for elastic-agent-android:
Users that are interested in elastic-agent-android are comparing it to the libraries listed below
- Docker image for MISP☆125Updated last month
- SIEM Logstash parsing for more than hundred technologies☆184Updated last week
- Transform Linux Audit logs for SIEM usage☆761Updated this week
- SOCFortress CoPilot☆270Updated this week
- Fortinet products logs to Elasticsearch☆98Updated 7 months ago
- The Sigma command line interface based on pySigma☆152Updated last week
- Zeek-Formatted Threat Intelligence Feeds☆359Updated this week
- This repository contains a few examples of actions that can be added to rules within Elastic Security.☆22Updated 2 months ago
- This repository contains Community and Field contributed content for LogScale☆215Updated this week
- A curated list of awesome things related to Suricata☆166Updated last month
- Set of SIGMA rules (>350) mapped to MITRE ATT&CK tactic and techniques☆357Updated 3 months ago
- A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters …☆236Updated last month
- Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)☆446Updated this week
- An IDE and translation engine for detection engineers and threat hunters. Be faster, write smarter, keep 100% privacy.☆150Updated 2 months ago
- A production ready Dockered MISP☆228Updated this week
- Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…☆402Updated 3 weeks ago
- OpenCTI Docker deployment helpers☆182Updated this week
- OpenCTI Connectors☆433Updated this week
- A standard for reducing log volume without sacrificing analytical capability☆204Updated 2 months ago
- Documentation and scripts to properly enable Windows event logs.☆605Updated last year
- Sysmon configuration file template with default high-quality event tracing☆482Updated last year
- MITRE Caldera™ for OT Plugins & Capabilities☆207Updated 5 months ago
- Indicators of Compromise☆192Updated this week
- This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple…☆665Updated 2 months ago
- RBA is Splunk's method to aggregate low-fidelity security events as interesting observations tagged with security metadata to create high…☆53Updated last month
- Stand up a simple Elastic container with Kibana, Fleet, and the Detection Engine☆454Updated 3 weeks ago
- Advanced Wazuh Rules for more accurate threat detection. Feel free to implement within your own Wazuh environment, contribute, or fork!☆726Updated last month
- SIEGMA - Transform Sigma rules into SIEM consumables☆149Updated last month
- ☆69Updated 3 weeks ago
- Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders☆901Updated last year