theY4Kman / suricata-prettifier
Command-line tool to format and syntax highlight Suricata rules
☆13Updated 4 years ago
Related projects: ⓘ
- 🌴 The STIX2 Pattern expression parser for humans☆25Updated 5 years ago
- Parse Suricata rules☆13Updated last year
- Build Automated Machine Images for MISP☆28Updated last year
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆15Updated 3 years ago
- Check IOC provided by a MISP instance on Suricata events☆17Updated 5 years ago
- Fang and defang indicators of compromise. You can test this project in a GUI here: http://ioc-fanger.hightower.space .☆55Updated 11 months ago
- Zeek package to detect Zerologon☆11Updated 2 years ago
- nmap/ndiff based scanner with template based notification system in case of infrastructure changes☆18Updated 6 years ago
- Pythonic way to work with the warning lists defined there: https://github.com/MISP/misp-warninglists☆29Updated this week
- A Python implementation of the Community ID flow hashing standard☆23Updated 9 months ago
- ☆66Updated this week
- Osquery Packs we use for customer security hardening☆12Updated 6 months ago
- ☆33Updated 3 years ago
- TITO is a light framework for operationalizing threat intelligence that is platform and data agnostic.☆20Updated 4 years ago
- setup zeek, previously Bro IDS☆17Updated last month
- Threat hunting repo for my independent study on threat hunting with OSQuery☆28Updated 6 years ago
- Generic Signature Format for SIEM Systems☆14Updated 2 years ago
- Threat Intelligence with Elastic - Minemeld integration with Elasticsearch☆19Updated 3 years ago
- A few quick recipes for those that do not have much time during the day☆21Updated 3 weeks ago
- This project is no longer maintained. There's a successor at https://github.com/zeek-packages/zeek-agent-v2☆14Updated 3 years ago
- Various blog post projects.☆10Updated 3 months ago
- pollen - A command-line tool for interacting with TheHive☆34Updated 5 years ago
- ☆15Updated 6 years ago
- A python script to shift the timestamp on syslog data. Useful for forensicators combating time skew.☆19Updated 2 years ago
- A mapping project between tags (annotations, labels) and domain names☆11Updated 4 months ago
- A Spicy protocol analyzer for WireGuard☆27Updated 4 years ago
- ansible role to setup MISP, Malware Information Sharing Platform & Threat Sharing☆51Updated 2 months ago
- A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for…☆32Updated 2 years ago
- Rapid cybersecurity toolkit based on Elastic in Docker. Designed to quickly build elastic-based environments to analyze and execute threa…☆17Updated 4 years ago
- Repository for all cbapi example scripts☆16Updated 6 years ago