sysflow-telemetry / sf-collectorLinks
SysFlow collection probe
☆16Updated 6 months ago
Alternatives and similar repositories for sf-collector
Users that are interested in sf-collector are comparing it to the libraries listed below
Sorting:
- SysFlow edge processing pipeline☆16Updated 6 months ago
- This repository includes a mapping table and a reference process that allows converting between STIX 2.1 Course of Action objects that ma…☆16Updated 2 years ago
- Firepit - STIX Columnar Storage☆16Updated last year
- OCA-wide documentation shared by all sub-projects and repositories☆33Updated 8 months ago
- This repository hosts community contributed Kestrel huntflows (.hf) and huntbooks (.ipynb)☆33Updated last year
- Augmentation to Machine Readable CTI☆31Updated 2 months ago
- ☆45Updated 4 months ago
- Red Canary's eBPF Sensor☆108Updated last month
- A STIX 2.1 Extension Definition for the Course of Action (COA) object type. The nested property extension allows a COA to share machine-r…☆23Updated last year
- ☆15Updated last year
- SysFlow documentation and issues tracker☆46Updated 9 months ago
- OASIS OpenC2 TC: Repository for submitting and reviewing OpenC2 use cases relevant to the work of the OpenC2 Language Subcommittee (LSC)☆28Updated 3 years ago
- Cisco Orbital - Osquery queries by Talos☆134Updated 11 months ago
- Adversary Emulation Planner☆41Updated last year
- [ARCHIVED -- USE TXT2DETECTION] A command line tool that converts Sigma Rules into STIX 2.1 Objects.☆10Updated 6 months ago
- A helper SDK to wrap the Google SecOps API for common security use cases☆24Updated this week
- ☆105Updated last year
- Python samples and utilities for Chronicle APIs☆84Updated last month
- Alternative YARA scanning engine☆72Updated 2 years ago
- A Splunk Technology Add-on to forward filtered ETW events.☆30Updated 4 years ago
- Open source endpoint agent providing host information to Zeek. [v2]☆83Updated 2 weeks ago
- A CALDERA plugin☆77Updated 2 weeks ago
- An implementation of a Windows Event Collector server running on GNU/Linux.☆76Updated last week
- Growing collection of Spicy-based protocol and file analyzers for Zeek☆31Updated 10 months ago
- Suricata JSON schema project☆12Updated 5 years ago
- An elevated STIX representation of the MITRE ATT&CK Groups knowledge base☆23Updated 3 years ago
- This project is no longer maintained. There's a successor at https://github.com/zeek/zeek-agent-v2☆123Updated 4 years ago
- Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert☆36Updated 2 years ago
- Connect - Stream - Observe - Respond | Morio provides the plumbing for your observability needs☆27Updated this week
- pySigma Cookiecutter backend template☆24Updated 4 months ago