wagga40 / Mitre2DatatablesLinks
Bring Your Own Mitre Att&ck © Matrix !
☆13Updated 2 years ago
Alternatives and similar repositories for Mitre2Datatables
Users that are interested in Mitre2Datatables are comparing it to the libraries listed below
Sorting:
- Sigma rules converted for direct use with Zircolite☆14Updated last week
- A collection of tips for using MISP.☆75Updated last year
- Scripts to integrate DFIR-IRIS, MISP and TimeSketch☆34Updated 3 years ago
- A script to collect (the most famous) Yara rules from more than 150 free resources. Free alternative to: https://valhalla.nextron-system…☆28Updated 2 years ago
- pySigma Splunk backend☆41Updated 2 months ago
- CyberChef - Detection Engineering, TI, DFIR, Malware Analysis Edition☆66Updated 3 years ago
- Remote access and Antivirus Logging Database☆44Updated last year
- ☆20Updated 3 years ago
- Library of threat hunts to get any user started!☆48Updated 5 years ago
- Collects a listing of MITRE ATT&CK Techniques, then discovers Splunk ESCU detections for each technique☆69Updated last year
- Documentation site for Velociraptor☆59Updated this week
- Sigma detection rules for hunting with the threathunting-keywords project☆58Updated 10 months ago
- A repository hosting example goodware evtx logs containing sample software installation and basic user interaction☆86Updated last month
- Digital Forensic Analysis and Incident Response Playbooks to handle real world security incidents☆51Updated last year
- Various PowerShells scripts I've made (or others have made) to automate some of the boring stuff in my everyday DFIR journey!☆49Updated 3 weeks ago
- Threat Detection & Anomaly Detection rules for popular open-source components☆53Updated 3 years ago
- ☆35Updated last year
- Summiting the Pyramid is a research project focused on engineering cyber analytics to make adversary evasion more difficult. The research…☆54Updated 3 weeks ago
- Forensic Artifact Collection Tool Matrix☆92Updated last year
- Cumulonimbus-UAL_Extractor is a PowerShell based tool created by the Tesorion CERT team to help gather the Unified Audit Logging out of a…☆21Updated 2 years ago
- The backend server handling API requests and task management☆55Updated this week
- MasterParser is a simple, all-in-one, digital forensics artifact parser☆23Updated 4 years ago
- A script that updates KAPE (using Get-KAPEUpdate.ps1) as well as EZ Tools (within .\KAPE\Modules\bin) and the ancillary files that enhanc…☆59Updated 7 months ago
- ☆54Updated last year
- Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise☆68Updated last year
- PowerShell scripts for running Magnet RESPONSE forensic collection tool in large enterprises.☆29Updated last year
- Plugins for parsing CSV files in Timeline Explorer. This project allows for anyone to add more supported files (i,e. they get a Line #/ta…☆28Updated 8 months ago
- Small-scale threat emulation and detection range built on Elastic and Atomic Redteam.☆38Updated last month
- simple webapp for converting sigma rules into siem queries using the pySigma library☆51Updated 2 years ago
- ☆21Updated 3 years ago