veeral-patel / true-positiveLinks
Collaborative, web-based case management for incident response
☆22Updated last year
Alternatives and similar repositories for true-positive
Users that are interested in true-positive are comparing it to the libraries listed below
Sorting:
- Workflows for Shuffle☆23Updated 2 years ago
- Digital Forensic Analysis and Incident Response Playbooks to handle real world security incidents☆44Updated last year
- Incident Response Network Tools☆24Updated 3 years ago
- Cerebrate is an open-source platform meant to act as a trusted contact information provider and interconnection orchestrator for other se…☆89Updated 3 weeks ago
- Threat Detection & Anomaly Detection rules for popular open-source components☆52Updated 2 years ago
- Incident Response Plan for all major incidents including cheatsheets for both linux and windows☆14Updated 5 years ago
- This TA takes Suricata5 data from your port mirrored Suricata server and makes it readable within Splunk. See Cheatsheets on how to setup…☆15Updated 4 years ago
- Incident Response Report Using GitHub-Sphinx☆20Updated 5 years ago
- Elastic TIP is a python tool which automates the process of aggregating Threat Intelligence and ingesting the intelligence into a common …☆27Updated 11 months ago
- 🚀 IRIS-SOAR: Modular SOAR (Security Orchestration, Automation, and Response) implementation in Python. Designed to complement DFIR-IRIS …☆10Updated last year
- Import specific data sources into the Sigma generic and open signature format.☆78Updated 3 years ago
- Stand-Alone Windows Hardening (SAWH) is a script to reduce the attack surface of Windows systems that are not attached to a Windows Activ…☆53Updated 3 years ago
- Sysmon and wazuh integration with Sigma sysmon rules [updated]☆67Updated 3 years ago
- Run Velociraptor on Security Onion☆38Updated 2 years ago
- ☆48Updated last week
- The Project can be used to integrate QRadar with MISP Threat Sharing Platform☆39Updated 3 years ago
- ☆85Updated 4 months ago
- Scripts to integrate DFIR-IRIS, MISP and TimeSketch☆34Updated 3 years ago
- Jimi is an automation first no-code platform designed and developed originally for Security Orchestration and Response. Since its launch …☆165Updated last year
- Apps to be used for Shuffle automation. Most of Shuffle's apps (2500+) are generated from APIs, and available in the search engine below:☆114Updated last week
- Osquery Packs we use for customer security hardening☆12Updated 2 weeks ago
- Please use https://github.com/veeral-patel/true-positive instead☆68Updated 2 years ago
- The official Prelude SIEM GitHub of https://www.prelude-siem.org☆31Updated 9 years ago
- Open-source Fabric templates for cybersecurity and compliance☆21Updated 6 months ago
- Threat intelligence and threat detection indicators (IOC, IOA)☆52Updated 4 years ago
- Custom Kibana dashboards to secure and monitor Microsoft 365.☆13Updated last year
- ☆29Updated 4 years ago
- Strelka Web UI for File Submission and Analysis☆69Updated 3 weeks ago
- Collection of Dashboards for Threat Hunting and more!☆68Updated 4 years ago
- A community event for security researchers to share their favorite notebooks☆108Updated last year