A dockerized version of the sof-elk project
☆13Oct 24, 2026Updated this week
Alternatives and similar repositories for docker-sof-elk
Users that are interested in docker-sof-elk are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Bulk-run Hayabusa across a folder of triage collections, one run per host, with per-host reports and a cross-host triage dashboard☆17Oct 21, 2026Updated last week
- Setup and authentication skills for CrowdStrike MCP: streamlined connection configuration, OAuth 2.0 token management, and secure access …☆13Aug 27, 2026Updated 2 months ago
- This project automates the creation of a complete security lab environment for detection engineering and attack simulation.☆14Aug 8, 2025Updated last year
- A curated reference of threat detection engineering & incident response frameworks, tools, and detection rule sources.☆13Jun 30, 2026Updated 4 months ago
- Ansible GHOSTS server role for LUDUS☆15Feb 16, 2026Updated 8 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆14Sep 2, 2026Updated last month
- A Postfix filter which takes a piped message and submits it to Cuckoo Sandbox☆11Apr 3, 2016Updated 10 years ago
- A lightning-fast, lightweight DFIR triage and threat hunting engine for Windows Minidumps (.DMP).☆20Oct 2, 2026Updated 3 weeks ago
- Australian Cyber Security Centre (ACSC) Essential Eight - Ansible role generated from ComplianceAsCode Project☆14Sep 4, 2026Updated last month
- Best Practices, queries, and packages for CQL the language of CrowdStrike's LogScale (Humio) log manager.☆14May 7, 2026Updated 5 months ago
- ☆19Updated this week
- API for bulk_extractor version 1.3☆14Nov 6, 2025Updated 11 months ago
- Digital Forensics XML packages in Python☆20May 8, 2026Updated 5 months ago
- Serialize Bash variables to JSON output☆20Oct 18, 2026Updated last week
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Outil de triage automatisé de différents types de collectes d'artefacts.☆18Dec 8, 2025Updated 10 months ago
- Borscht - A Russian service monitor to track the uptime of domains and services☆10May 9, 2022Updated 4 years ago
- Orchestration Software for Incident Response☆16Oct 9, 2026Updated 3 weeks ago
- ☆14Updated this week
- Collection of tools to build and run a distributed spamtrap system, consisting of IMAP and SMTP collectors and a backend that extracts at…☆15Oct 23, 2023Updated 3 years ago
- Independent file type identification python library☆12Mar 16, 2023Updated 3 years ago
- FakeOpenSmtpRelay.py is a Python3 script simulating a working open SMTP relay☆13Mar 18, 2019Updated 7 years ago
- Logpresso Mini and community contents for incident response☆22Oct 21, 2021Updated 5 years ago
- MISP sighting server is a fast sighting server to store and look-up sightings on attributes (network indicators, file hashes, system indi…☆15Dec 24, 2023Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A practical DFIR cheatsheet for identifying, collecting, triaging, and reviewing macOS persistence mechanisms, with acquisition-aware gui…☆26Apr 26, 2026Updated 6 months ago
- DFIR forensics companion server + capture extension☆35Oct 23, 2026Updated last week
- Read Zeek (Bro) logs into typed Python records; convert to JSON or CSV, map to Elastic Common Schema, load into Elasticsearch.☆44Updated this week
- An example of a vulnerable slack bot that runs in AWS lambda.☆19Jul 15, 2017Updated 9 years ago
- Extract information from MISP via the API☆16Jul 18, 2016Updated 10 years ago
- Tool to extract indicators of compromise from security reports in PDF,HTML,Web,Text format☆10Nov 6, 2017Updated 8 years ago
- XCP-ng installer☆16May 23, 2022Updated 4 years ago
- Rust DFIR tool that massively parses cross-platform evidence, even deleted logs, into a lateral movement timeline and graph database.☆27Oct 14, 2026Updated 2 weeks ago
- Disk Image Mounting Script☆14Jul 21, 2026Updated 3 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A fork of Picoprobe, an SWD progammer firmware, for the Pico Debug'n'Dump☆20Aug 24, 2021Updated 5 years ago
- Raspberry Pi satellite SDR base station for weather & telemetry☆14Sep 19, 2020Updated 6 years ago
- A wrapper script for https://sploitus.com to scrape query results for tools and exploits☆15Mar 3, 2019Updated 7 years ago
- Harness the power of Splunk for your investigations☆172Oct 6, 2026Updated 3 weeks ago
- Infrastructure as code for CrowdStrike — manage detections, saved searches, lookup files, and more with a Terraform-like lifecycle.☆26Updated this week
- Virtual machine introspection library based on libvmi - parts of this work have been funded by Deutsche Forschungsgemeinschaft (DFG) – pr…☆32Mar 3, 2022Updated 4 years ago
- Self-hosted MDM for Linux fleets. Enrollment, profiles, disk encryption, lock and wipe, OS updates and remote assistance with each distri…☆21Oct 22, 2026Updated last week