Pulls IOCs from MISP and adds the to reference sets in QRadar
☆33May 18, 2026Updated 3 months ago
Alternatives and similar repositories for MISP-QRADAR-REFERENCE-SET-BUILDER
Users that are interested in MISP-QRADAR-REFERENCE-SET-BUILDER are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The Project can be used to integrate QRadar with MISP Threat Sharing Platform☆40May 18, 2022Updated 4 years ago
- Scripts for TheHive.☆23Nov 15, 2019Updated 6 years ago
- The CRATOS proxy API integrates with your MISP instance and allows to extract indicators that can be consumed by security components such…☆13Jul 25, 2026Updated 3 weeks ago
- Monitor device events using QRadar☆22Sep 17, 2025Updated 11 months ago
- Connect your mail client/infrastructure to MISP in order to create events based on the information contained within mails.☆70Nov 11, 2023Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Utilizing your Threat data from a MISP instance into CarbonBlack Response by exposing the data in the Threat Intelligence Feed.☆20May 25, 2022Updated 4 years ago
- QRadar Export the rule set for printing☆23Oct 23, 2017Updated 8 years ago
- Samples code that uses QRadar API's☆209May 20, 2020Updated 6 years ago
- This repository bundles various utilities and scripts I built for use with IBM QRadar SIEM☆16Jan 30, 2026Updated 6 months ago
- ☆47Jan 15, 2016Updated 10 years ago
- Repo for experimenting and testing MCP server builds for CTI-related research.☆27May 13, 2025Updated last year
- Unofficial third-party scripts, playbooks, and content for IBM QRadar & QRadar Community Edition.☆87May 8, 2025Updated last year
- Common Exercise Format - CEXF☆11Aug 15, 2024Updated 2 years ago
- These are open source rules that can be utilized with QRadar to detect various types of threats in the environment.☆60Jun 11, 2019Updated 7 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- SANS #CTI Summit 2025☆13Jan 28, 2025Updated last year
- Integrate IBM QRadar and RPA to automate security L1 tasks.☆14May 20, 2022Updated 4 years ago
- Using QRadar API☆20Feb 23, 2018Updated 8 years ago
- A production ready Dockered MISP☆24Dec 7, 2023Updated 2 years ago
- Scripts to automatically import threat intel into QRadar☆14Jun 20, 2019Updated 7 years ago
- A minimal, modular MCP server that equips your AI with practical capabilities for real-world threat hunting workflows.☆19Apr 26, 2026Updated 3 months ago
- CSIRT Jump Bag☆27Apr 25, 2024Updated 2 years ago
- This is a repository to experiment with MCP for security☆51Jan 22, 2025Updated last year
- Feed for verious malicious IPs such as malware and botnets☆13Jun 20, 2016Updated 10 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- This repository includes a mapping table and a reference process that allows converting between STIX 2.1 Course of Action objects that ma…☆16Aug 24, 2022Updated 3 years ago
- MineMeld nodes for MISP☆19Jan 23, 2024Updated 2 years ago
- Build Automated Machine Images for MISP☆29Jun 9, 2023Updated 3 years ago
- misp-cloud - Cloud-ready images of MISP☆74Aug 24, 2022Updated 3 years ago
- Feed Generator for MISP☆19Nov 2, 2022Updated 3 years ago
- misp-guard is a mitmproxy addon that inspects and blocks outgoing events to external MISP instances via sync mechanisms (pull/push) based…☆22Jul 3, 2026Updated last month
- Python library for managing malware feeds and blacklists published online by third parties.☆10Nov 13, 2015Updated 10 years ago
- This repository contains all the config files and scripts used for our Open Source Endpoint monitoring project.☆35Jul 8, 2019Updated 7 years ago
- A STIX 2.1 Extension Definition for the Course of Action (COA) object type. The nested property extension allows a COA to share machine-r…☆24Dec 11, 2023Updated 2 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- ☆21Jan 20, 2023Updated 3 years ago
- Collection of Jupyter Notebook for Threat Hunting and Blue Team Purposes☆22Jun 15, 2022Updated 4 years ago
- CocktailParty is a data broker system based on phoenix framework☆23Apr 23, 2025Updated last year
- Python library for the ArcSight logger REST API☆27Sep 30, 2021Updated 4 years ago
- Import specific data sources into the Sigma generic and open signature format.☆78May 6, 2022Updated 4 years ago
- [ABANDONED] A Docker container running Suricata and the ELK stack.☆21Jan 27, 2016Updated 10 years ago
- Additional material for our paper "Breaking all the Things - A Systematic Survey of Firmware Extraction Techniques for IoT Devices" (CARD…☆19Sep 10, 2019Updated 6 years ago