veeral-patel / true-positiveLinks
Collaborative, web-based case management for incident response
☆24Updated last year
Alternatives and similar repositories for true-positive
Users that are interested in true-positive are comparing it to the libraries listed below
Sorting:
- Cerebrate is an open-source platform meant to act as a trusted contact information provider and interconnection orchestrator for other se…☆91Updated last week
- A collection of tips for using MISP.☆75Updated last year
- Digital Forensic Analysis and Incident Response Playbooks to handle real world security incidents☆50Updated last year
- The Project can be used to integrate QRadar with MISP Threat Sharing Platform☆40Updated 3 years ago
- Technical add-on for Splunk related to TheHive/Cortex from TheHive project☆53Updated 4 months ago
- Threat Detection & Anomaly Detection rules for popular open-source components☆53Updated 3 years ago
- An open source platform to support analysts to organise their case and tasks☆122Updated this week
- Import specific data sources into the Sigma generic and open signature format.☆79Updated 3 years ago
- The official Prelude SIEM GitHub of https://www.prelude-siem.org☆34Updated 9 years ago
- 🚀 IRIS-SOAR: Modular SOAR (Security Orchestration, Automation, and Response) implementation in Python. Designed to complement DFIR-IRIS …☆13Updated last year
- Incident Response Network Tools☆24Updated 4 years ago
- Incident response teams usually working on the offline data, collecting the evidence, then analyze the data☆45Updated 4 years ago
- Security Onion + Automation + Response Lab including n8n and Velociraptor☆112Updated 3 years ago
- Workflows for Shuffle☆24Updated 3 years ago
- ☆10Updated 11 months ago
- ☆88Updated 10 months ago
- Docker configurations for TheHive, Cortex and 3rd party tools☆128Updated 3 years ago
- Scripts to integrate DFIR-IRIS, MISP and TimeSketch☆34Updated 3 years ago
- Swagger/ OpenAPI specifications for security products and services☆77Updated last month
- Notes on managing and coordinating the response to major cyber incidents☆41Updated 5 years ago
- Incident Response Methodologies (IRM), also called Incident Playbook, based on the work done by the CERT Societe General☆24Updated 4 years ago
- Collection of Dashboards for Threat Hunting and more!☆71Updated 5 years ago
- Apps to be used for Shuffle automation. Most of Shuffle's apps (2500+) are generated from APIs, and available in the search engine below:☆120Updated last month
- Dettectinator - The Python library to your DeTT&CT YAML files.☆119Updated 9 months ago
- Please use https://github.com/veeral-patel/true-positive instead☆71Updated 3 years ago
- This TA takes Suricata5 data from your port mirrored Suricata server and makes it readable within Splunk. See Cheatsheets on how to setup…☆15Updated 5 years ago
- Run Velociraptor on Security Onion☆40Updated 3 years ago
- simple webapp for converting sigma rules into siem queries using the pySigma library☆51Updated 2 years ago
- Terraform scripts for deploying OpenCTI to AWS, Azure, and GCP☆33Updated last year
- Synthetic Adversarial Log Objects: A Framework for synthentic log generation☆85Updated 2 years ago