Alternatives and similar repositories for magic-qradar:

Users that are interested in magic-qradar are comparing it to the libraries listed below

• karthikkbala / MISP-QRadar-Integration
  The Project can be used to integrate QRadar with MISP Threat Sharing Platform
  ☆39Updated 2 years ago
• josh-morin / qradar
  Unofficial third-party scripts, playbooks, and content for IBM QRadar & QRadar Community Edition.
  ☆80Updated 7 months ago
• Xboarder56 / QRadar-ThreatIntel-Import
  Scripts to automatically import threat intel into QRadar
  ☆12Updated 5 years ago
• LogRhythm-Labs / Sigma
  Convert Sigma rules to LogRhythm searches
  ☆20Updated 3 years ago
• CrowdStrike / MISP-tools
  Import CrowdStrike Threat Intelligence into your instance of MISP
  ☆44Updated 2 weeks ago
• weslambert / securityonion-velociraptor
  Run Velociraptor on Security Onion
  ☆37Updated 2 years ago
• HASecuritySolutions / LogCampaign
  Provides detection capabilities and log conversion to evtx or syslog capabilities
  ☆52Updated 2 years ago
• weslambert / DinoSOARLab
  Security Onion + Automation + Response Lab including n8n and Velociraptor
  ☆107Updated 2 years ago
• joshlemon / DFIR-Reference-Frameworks
  Repository of public reference frameworks for the DFIR community.
  ☆115Updated last year
• dfirence / ma-insights-xe
  User Feedback Space of #MitreAssistant
  ☆37Updated last year
• DaRuudii / qradar-utils
  This repository bundles various utilities and scripts I built for use with IBM QRadar SIEM
  ☆16Updated 4 months ago
• msraju / Incident-Response-Playbooks
  ☆42Updated 2 years ago
• sans-blue-team / sec530-wiki
  ☆54Updated 3 years ago
• cudeso / misp-tip-of-the-week
  A collection of tips for using MISP.
  ☆74Updated 3 months ago
• cudeso / misp2sentinel
  MISP to Sentinel integration
  ☆63Updated 4 months ago
• MarkBaggett / apiify
  Wrap any binary into a cached webserver
  ☆53Updated 2 years ago
• sametsazak / sysmon
  Sysmon and wazuh integration with Sigma sysmon rules [updated]
  ☆64Updated 3 years ago
• splunk / TA-microsoft-365-defender-advanced-hunting-add-on
  ☆14Updated last month
• Truvis / SplunkDashboards
  Collection of Dashboards for Threat Hunting and more!
  ☆65Updated 4 years ago
• corelight / threat-hunting-guide
  ☆51Updated 3 years ago
• nov3mb3r / trident
  A PowerShell incident response script for quick triage
  ☆80Updated 2 years ago
• LetMeR00t / TA-thehive-cortex
  Technical add-on for Splunk related to TheHive/Cortex from TheHive project
  ☆53Updated last week
• infosecB / detection-as-code
  An example of how to deploy a Detection as Code pipeline using Sigma Rules, Sigmac, Gitlab CI, and Splunk.
  ☆55Updated 3 years ago
• 13Cubed / Abeebus
  A GeoIP lookup utility utilizing ipinfo.io services.
  ☆86Updated last year
• TheHive-Project / Synapse
  Synapse: a Meta Alert Feeder for TheHive, a Security Incident Response Platform
  ☆71Updated last year
• mbabinski / Sigma-Rules
  A repository of my own Sigma detection rules.
  ☆157Updated 6 months ago
• signorrayan / SplunkThreatHunting
  This repository contains Splunk queries to hunt some anomalies
  ☆40Updated 2 years ago
• infobloxopen / threat-intelligence
  ☆70Updated this week
• syloktools / MISP-QRADAR-REFERENCE-SET-BUILDER
  Pulls IOCs from MISP and adds the to reference sets in QRadar
  ☆34Updated last year
• AndrewRathbun / Awesome-KAPE
  A curated list of KAPE-related resources
  ☆164Updated last week