tcw3bb / ISC_PostsLinks
Files from my Storm Center Articles
☆17Updated 2 years ago
Alternatives and similar repositories for ISC_Posts
Users that are interested in ISC_Posts are comparing it to the libraries listed below
Sorting:
- Cyber Analytics Platform and Examination System (CAPES) Project Page☆60Updated 6 years ago
- Script to perform bulk local GeoIP lookups (ASN and geo) for IP addresses☆102Updated 6 years ago
- Integrate Zeek with Alienvault OTX☆25Updated 5 years ago
- Bro IDS + ELK Stack to detect and block data exfiltration☆46Updated 7 years ago
- Scripts for Bro IDS and ELK Stack☆57Updated 10 years ago
- ☆50Updated 5 years ago
- Network Forensics Bro scripts & pcap samples☆63Updated 11 years ago
- CIF v3 -- the fastest way to consume threat intelligence☆183Updated 2 years ago
- A website and framework for testing NIDS detection☆57Updated 4 years ago
- Harbinger Threat Intelligence☆83Updated 10 years ago
- Threat Feed Aggregation, Made Easy☆169Updated 5 years ago
- QRadio ~ Best Threat Intelligence Radio ~ Tune In!☆98Updated 9 years ago
- InvestigationPlaybookSpec☆71Updated 8 years ago
- Download a list of suspected malicious IPs and Domains. Create a QRadar Reference Set. Search Your Environment For Malicious IPs☆69Updated 4 years ago
- Simple Microsoft Windows sessions event logs visualization☆156Updated 3 years ago
- Use OpenDNS's investigate API to find newly observed domains which match a brand or string☆17Updated 9 years ago
- Bro-IDS scripts☆50Updated 9 years ago
- Docker container for MISP☆96Updated 7 years ago
- The Bro/Zeek language cheat sheet☆53Updated 12 years ago
- ☆55Updated 3 years ago
- OSSEC Decoder & Rulesets for Sysmon Events☆15Updated 10 years ago
- This is a repository from Adam Swan and I's presentation on Windows Logs Zero 2 Hero.☆22Updated 8 years ago
- Beholder is a shell script which installs and configures essentials to peer into your network activity.☆19Updated 8 years ago
- Connect your mail client/infrastructure to MISP in order to create events based on the information contained within mails.☆69Updated 2 years ago
- A framework for receiving and redistributing abuse feeds☆125Updated 6 years ago
- CIFv3 DeploymentKit☆64Updated 5 years ago
- Integrating Sysinternals Autoruns’ logs into Security Onion☆31Updated last year
- Simple block lists hub for PAN-OS DBL feature☆35Updated 7 years ago
- Bro scripts to be shared with the community☆111Updated 12 years ago
- Basic Anomaly IDS capabilities with Python and Bro☆105Updated 7 years ago