veeral-patel / true-positiveLinks
Collaborative, web-based case management for incident response
☆23Updated last year
Alternatives and similar repositories for true-positive
Users that are interested in true-positive are comparing it to the libraries listed below
Sorting:
- Cerebrate is an open-source platform meant to act as a trusted contact information provider and interconnection orchestrator for other se…☆91Updated 2 weeks ago
- Import specific data sources into the Sigma generic and open signature format.☆79Updated 3 years ago
- Incident Response Network Tools☆24Updated 4 years ago
- Digital Forensic Analysis and Incident Response Playbooks to handle real world security incidents☆49Updated last year
- An open source platform to support analysts to organise their case and tasks☆110Updated 2 weeks ago
- Workflows for Shuffle☆24Updated 3 years ago
- Sysmon and wazuh integration with Sigma sysmon rules [updated]☆70Updated 4 years ago
- The Project can be used to integrate QRadar with MISP Threat Sharing Platform☆40Updated 3 years ago
- MONARC - Method for an Optimised aNAlysis of Risks by @NC3-LU☆114Updated this week
- A collection of tips for using MISP.☆75Updated 11 months ago
- This TA takes Suricata5 data from your port mirrored Suricata server and makes it readable within Splunk. See Cheatsheets on how to setup…☆15Updated 5 years ago
- Notes on managing and coordinating the response to major cyber incidents☆41Updated 5 years ago
- OpenCTI–Wazuh connector looking for indicators in Wazuh and creating sightings☆22Updated last year
- Please use https://github.com/veeral-patel/true-positive instead☆70Updated 2 years ago
- Strelka Web UI for File Submission and Analysis☆72Updated last week
- A script to create and assign SOP tasks into the cases☆20Updated 5 years ago
- Threat Detection & Anomaly Detection rules for popular open-source components☆53Updated 3 years ago
- Security Onion + Automation + Response Lab including n8n and Velociraptor☆112Updated 3 years ago
- Jimi is an automation first no-code platform designed and developed originally for Security Orchestration and Response. Since its launch …☆167Updated last year
- ☆88Updated 8 months ago
- Open-source Fabric templates for cybersecurity and compliance☆27Updated 10 months ago
- Docker configurations for TheHive, Cortex and 3rd party tools☆128Updated 2 years ago
- ☆10Updated 10 months ago
- 🚀 IRIS-SOAR: Modular SOAR (Security Orchestration, Automation, and Response) implementation in Python. Designed to complement DFIR-IRIS …☆11Updated last year
- MasterParser is a simple, all-in-one, digital forensics artifact parser☆23Updated 4 years ago
- Python library for threat intelligence☆91Updated 10 months ago
- Terraform scripts for deploying OpenCTI to AWS, Azure, and GCP☆33Updated last year
- Scripts to integrate DFIR-IRIS, MISP and TimeSketch☆34Updated 3 years ago
- Utilizing your Threat data from a MISP instance into CarbonBlack Response by exposing the data in the Threat Intelligence Feed.☆20Updated 3 years ago
- Create alerts in The Hive from your Graylog alerts, to be turned into Hive cases.☆45Updated 5 years ago