tanium / TaniumOsquery
An integration between Tanium and Osquery
☆12Updated 7 years ago
Alternatives and similar repositories for TaniumOsquery:
Users that are interested in TaniumOsquery are comparing it to the libraries listed below
- OS X Strata builds upon Yelps OSXCollector, providing a user interface to analyze data collected from a potentially compromised system.☆14Updated 5 years ago
- Scripts from my book OS X Incident Response Scripting and Analysis -> https://www.amazon.com/dp/012804456X/ref=cm_sw_r_tw_dp_U_x_fQeLAb68…☆49Updated 8 years ago
- OpenDXL Python Client☆94Updated 3 months ago
- CrowdStrike Falcon log forwarder from falcon S3 bucket to your S3 bucket☆11Updated 4 years ago
- Python script to parse the Most Recently Used (MRU) plist files on macOS into a more human friendly format.☆104Updated 7 years ago
- Carbon Black API Resources☆93Updated 7 years ago
- Collecting & Hunting for IOCs with gusto and style☆116Updated 6 years ago
- Carbon Black API - Python language bindings☆145Updated 8 months ago
- ☆36Updated 8 years ago
- Carbon Black Feeds☆72Updated 2 years ago
- AlienVault Open Threat Exchange App For Splunk☆9Updated 10 years ago
- Connector for pulling and converting STIX information from TAXII Service Providers into CB Feeds.☆15Updated 2 years ago
- Filters that process and transform the output of osxcollector☆78Updated 5 years ago
- This is the Splunk App integrated with Tanium☆10Updated 7 years ago
- Example Splunk Alert Scripts☆20Updated 10 years ago
- InvestigationPlaybookSpec☆72Updated 7 years ago
- Sysmon Splunk App☆46Updated 6 years ago
- Cyber Analytics Platform and Examination System (CAPES) Project Page☆60Updated 5 years ago
- ☆48Updated 9 years ago
- CB API scripts for IR, administration, etc.☆32Updated 5 years ago
- Grabs the administrator and authentication logs from the Duo Security API and sends CEF-formatted syslog.☆28Updated 8 years ago
- Command line interface to Carbon Black Response☆38Updated 4 years ago
- PowerShell script utilized to pull several forensic artifacts from a live Win7 and WinXP system without WINRM.☆50Updated 7 years ago
- ☆55Updated 3 years ago
- ☆190Updated 11 months ago
- Analyze binaries collected in VMware Carbon Black EDR against Yara rules.☆37Updated 2 years ago
- Isolated, Scalable, & Lightweight Environment for Training☆111Updated 5 years ago
- Threat Feed Aggregation, Made Easy☆167Updated 4 years ago
- Docker container for MISP☆96Updated 6 years ago
- Carbonblack Live Response from the comfort of your own terminal☆20Updated 9 years ago