veeral-patel / true-positiveLinks
Collaborative, web-based case management for incident response
☆23Updated last year
Alternatives and similar repositories for true-positive
Users that are interested in true-positive are comparing it to the libraries listed below
Sorting:
- Cerebrate is an open-source platform meant to act as a trusted contact information provider and interconnection orchestrator for other se…☆90Updated 3 weeks ago
- Digital Forensic Analysis and Incident Response Playbooks to handle real world security incidents☆49Updated last year
- This TA takes Suricata5 data from your port mirrored Suricata server and makes it readable within Splunk. See Cheatsheets on how to setup…☆15Updated 5 years ago
- 🚀 IRIS-SOAR: Modular SOAR (Security Orchestration, Automation, and Response) implementation in Python. Designed to complement DFIR-IRIS …☆11Updated last year
- Workflows for Shuffle☆23Updated 2 years ago
- A collection of tips for using MISP.☆74Updated 10 months ago
- Notes on managing and coordinating the response to major cyber incidents☆41Updated 5 years ago
- The official Prelude SIEM GitHub of https://www.prelude-siem.org☆33Updated 9 years ago
- Convert Sigma rules to Wazuh rules☆73Updated last month
- The aim of this repository is to provide a list of examples of tools, sources and measures available to incident response teams☆64Updated 5 years ago
- Security Onion + Automation + Response Lab including n8n and Velociraptor☆112Updated 3 years ago
- An open source platform to support analysts to organise their case and tasks☆107Updated this week
- Scripts to integrate DFIR-IRIS, MISP and TimeSketch☆34Updated 3 years ago
- Please use https://github.com/veeral-patel/true-positive instead☆69Updated 2 years ago
- Incident Response Network Tools☆24Updated 4 years ago
- ☆87Updated 7 months ago
- Threat Detection & Anomaly Detection rules for popular open-source components☆53Updated 3 years ago
- Bring Your Own Mitre Att&ck © Matrix !☆13Updated last year
- ☆51Updated this week
- The Project can be used to integrate QRadar with MISP Threat Sharing Platform☆40Updated 3 years ago
- Import specific data sources into the Sigma generic and open signature format.☆78Updated 3 years ago
- Threat intelligence and threat detection indicators (IOC, IOA)☆52Updated 4 years ago
- MineMeld nodes for MISP☆19Updated last year
- Technical add-on for Splunk related to TheHive/Cortex from TheHive project☆53Updated 3 weeks ago
- A collection of Cortex Analyzers and Responders for TheHive/Cortex☆13Updated 5 years ago
- Corelight@Home script☆44Updated 2 years ago
- Sysmon and wazuh integration with Sigma sysmon rules [updated]☆70Updated 4 years ago
- Swagger/ OpenAPI specifications for security products and services☆77Updated last month
- The Infosec Community Definitive Guide to Jupyter Notebooks☆126Updated 4 years ago
- Python library for threat intelligence☆89Updated 9 months ago