wazuh / wazuh-splunk
Wazuh - Splunk App
☆50Updated 2 months ago
Related projects ⓘ
Alternatives and complementary repositories for wazuh-splunk
- Parse wazuh[HIDS] alerts into ECS mapping using Filebeat☆27Updated 4 years ago
- Wazuh - RESTful API☆69Updated 2 months ago
- Synapse: a Meta Alert Feeder for TheHive, a Security Incident Response Platform☆71Updated last year
- Collection of walkthroughs on various threat hunting techniques☆75Updated 4 years ago
- A Splunk App containing Sigma detection rules, which can be updated from a Git repository.☆107Updated 4 years ago
- Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing☆105Updated 10 months ago
- Kibana 7 Templates for Suricata IDPS Threat Hunting☆39Updated 2 years ago
- ☆85Updated this week
- ☆47Updated this week
- PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform☆147Updated 2 years ago
- Docker files for Security Onion☆40Updated 3 years ago
- Threat Intelligence with Elastic - Minemeld integration with Elasticsearch☆19Updated 3 years ago
- Vulnerability Assessment Module - OpenVas with Elastic stack using VulnWhisperer☆19Updated 5 years ago
- This program exports MITRE ATT&CK framework in ELK dashboard☆77Updated last year
- A Ruleset to enhance detection capabilities of Ossec using Sysmon☆86Updated 2 years ago
- SOC Workflow App helps Security Analysts and Threat Hunters explore suspicious events, look into raw events arriving at the Elastic Stack…☆92Updated 2 years ago
- Sysmon and wazuh integration with Sigma sysmon rules [updated]☆61Updated 3 years ago
- A collection of notebooks built for defensive and offensive operations.☆76Updated 4 years ago
- A curated list of awesome things related to TheHive & Cortex☆173Updated 3 years ago
- Mapping Corelight or Zeek data to Elastic Common Schema fields☆34Updated 2 weeks ago
- All-in-one bundle of MISP, TheHive and Cortex☆169Updated 2 years ago
- ☆27Updated 4 years ago
- Ansible playbook for installing MineMeld on Linux☆48Updated 3 years ago
- Wazuh - Tools for packages creation☆105Updated last week
- Run Velociraptor on Security Onion☆34Updated 2 years ago
- SIGMA UI is a free open-source application based on the Elastic stack and Sigma Converter (sigmac)☆184Updated 3 years ago
- A Sigma to Wazuh / OSSEC converter including a generated Windows Sysmon ruleset☆33Updated 4 years ago
- ☆48Updated this week
- This package allows the use of a custom Elastalert Alert which creates alerts with observables in TheHive using TheHive4Py.☆27Updated 3 years ago