Alternatives and similar repositories for SplunkforTanium:

Users that are interested in SplunkforTanium are comparing it to the libraries listed below

• n3l5 / irFARTpull
  PowerShell script utilized to pull several forensic artifacts from a live Win7 and WinXP system without WINRM.
  ☆50Updated 7 years ago
• tanium / pytan
  Python Wrapper for Tanium's SOAP API
  ☆45Updated 5 years ago
• PaloAltoNetworks / report_to_misp
  Parse a report and import the events into MISP
  ☆29Updated 9 years ago
• Foundstone / InvestigationPlaybookSpec
  InvestigationPlaybookSpec
  ☆72Updated 7 years ago
• BechtelCIRT / beholder
  Beholder is a shell script which installs and configures essentials to peer into your network activity.
  ☆19Updated 7 years ago
• et0x / Incident-Response
  ☆36Updated 8 years ago
• paulpc / quickIR
  Auxiliary scripts for Incident Response with ELK
  ☆11Updated 9 years ago
• n3l5 / irCRpull
  irCRpull is a PowerShell script utilized to pull several system artifacts, utilizing the free tool CrowdResponse, from a live Win7+ syste…
  ☆14Updated 10 years ago
• devgc / SrumMonkey
  Tool to parse SRU database
  ☆24Updated 7 years ago
• sooshie / scrape_pdf
  Python script to pull various IOCs from PDFs
  ☆15Updated 10 years ago
• JamesHabben / sysmon-queries
  Queries to parse sysmon event log file with microsoft logparser
  ☆56Updated 9 years ago
• pun1sh3r / iocminion
  Just another tool to extract Indicator of compromise (ioc) from files
  ☆29Updated 9 years ago
• crits / mcrits
  CRITs IOC Visualization in Maltego
  ☆28Updated 10 years ago
• hiddenillusion / IR
  Some dfir stuff
  ☆31Updated 3 years ago
• 0xd34db33f / cuckoo
  Cuckoo Signatures and Reports
  ☆8Updated 8 years ago
• opensourcesec / cblrconsole
  Carbonblack Live Response from the comfort of your own terminal
  ☆20Updated 9 years ago
• exp0se / bro-intel-generator
  Script for generating Bro intel files from pdf or html reports
  ☆76Updated 9 years ago
• STIXProject / specifications
  DRAFT STIX specification documents for version 1.2
  ☆20Updated 8 years ago
• anl-cyberscience / FlexTransform
  Enables dynamic translation of structured data between formats
  ☆14Updated 6 years ago
• gitunique / bro-scripts
  Collection of bro scripts
  ☆9Updated 9 years ago
• swackhamer / vt_notification_puller
  VirusTotal Intelligence Notification Puller
  ☆28Updated 8 years ago
• jshlbrd / laikaboss-modules
  ☆17Updated 7 years ago
• malware-kitten / bro_scripts
  A collection of bro_scripts and signatures
  ☆26Updated 5 years ago
• exp0se / harbinger
  Harbinger Threat Intelligence
  ☆82Updated 9 years ago
• iSIGHTPartners / macaroni_server
  A REST API server for yara event notifications. Mapping file hashes to yara signatures in Elasticsearch for easy hash lookup or finding h…
  ☆19Updated 9 years ago
• rkovar / splunk-hunting-helpers
  ☆55Updated 3 years ago
• x41x41x90 / pm_shredder
  Coming to a place near you.....
  ☆25Updated 9 years ago
• boolaz / BooLet
  Log Examination Tool
  ☆26Updated 8 years ago
• jipegit / IRNotes
  Some IR notes
  ☆73Updated 8 years ago
• ctxis / cbrcli
  Command line interface to Carbon Black Response
  ☆38Updated 4 years ago