swimlane / elk-tls-docker
This repository contains code to create a ELK stack with certificates & security enabled using docker-compose
☆186Updated 5 months ago
Related projects ⓘ
Alternatives and complementary repositories for elk-tls-docker
- SIEGMA - Transform Sigma rules into SIEM consumables☆141Updated last year
- All-in-one bundle of MISP, TheHive and Cortex☆169Updated 2 years ago
- Security Onion + Automation + Response Lab including n8n and Velociraptor☆105Updated 2 years ago
- Convert Sigma rules to Wazuh rules☆57Updated 6 months ago
- SOC Workflow App helps Security Analysts and Threat Hunters explore suspicious events, look into raw events arriving at the Elastic Stack…☆92Updated 2 years ago
- Installation script for ELK stack to make life easy.☆67Updated 4 years ago
- A Ruleset to enhance detection capabilities of Ossec using Sysmon☆86Updated 2 years ago
- Repository for SPEED SIEM Use Case Framework☆52Updated 4 years ago
- A curated list of awesome things related to TheHive & Cortex☆172Updated 3 years ago
- Sysmon and wazuh integration with Sigma sysmon rules [updated]☆61Updated 3 years ago
- A Sigma to Wazuh / OSSEC converter including a generated Windows Sysmon ruleset☆33Updated 4 years ago
- Technical add-on for Splunk related to TheHive/Cortex from TheHive project☆49Updated 2 weeks ago
- A Splunk App containing Sigma detection rules, which can be updated from a Git repository.☆107Updated 4 years ago
- Endpoint detection for remote hosts for consumption by RITA and Elasticsearch☆66Updated last year
- ☆34Updated 3 years ago
- Synapse: a Meta Alert Feeder for TheHive, a Security Incident Response Platform☆71Updated last year
- PowerShell - Endpoint Analysis Solution Your Windows Intranet Needs☆46Updated 9 months ago
- ☆14Updated last month
- This repository was created to aid in the deployment/maintenance of the Sysmon service on a large number of computers.☆82Updated last year
- Synthetic Adversarial Log Objects: A Framework for synthentic log generation☆77Updated 10 months ago
- Convert Sigma rules to LogRhythm searches☆19Updated 2 years ago
- SIGMA UI is a free open-source application based on the Elastic stack and Sigma Converter (sigmac)☆184Updated 3 years ago
- Docker configurations for TheHive, Cortex and 3rd party tools☆113Updated last year
- The PoLRBear Project☆35Updated 3 years ago
- RRR (Rapid Response Reporting) is a collection of Incident Response Report objects. They are designed to help incident responders provid…☆36Updated 2 years ago
- A collection of useful PowerShell tools to collect, organize, and visualize Sysmon event data☆40Updated 4 years ago
- evtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files.☆146Updated 2 years ago
- Mapping your datasources and detections to the MITRE ATT&CK Navigator framework.☆57Updated 4 years ago
- ☆1Updated 2 weeks ago