Convert MISP events to Elastalert rules
☆12Aug 10, 2021Updated 5 years ago
Alternatives and similar repositories for misp2elastalert
Users that are interested in misp2elastalert are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A Compiler from Sigma rules to VQL☆21Oct 19, 2026Updated 3 weeks ago
- Muteces (mutexes/mutants) used by various malware families☆25Nov 11, 2024Updated last year
- A multi-threaded malware sample downloader based upon given MD-5/SHA-1/SHA-256 hashes, using multiple malware databases.☆30Apr 14, 2023Updated 3 years ago
- ☆37Dec 17, 2020Updated 5 years ago
- PCAP De-Encapsulation utility ERSPAN ARISTA METAMAKO IXIA☆11Oct 22, 2026Updated 2 weeks ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A 'Universal WHOIS' proxy server - you query it, it gives back the correct details☆11Mar 22, 2026Updated 7 months ago
- Python implementation of a proxy DHCP server☆11Updated this week
- misc scripts/utils that I've written that aren't deserving of own repos.☆14Aug 18, 2021Updated 5 years ago
- ☆24Dec 15, 2022Updated 3 years ago
- ☆11Apr 10, 2022Updated 4 years ago
- An open-source log collector for collecting logs from Windows Event Forwarding☆10Jan 29, 2022Updated 4 years ago
- (DEPRECATED) Python bindings for Broccoli☆13Apr 26, 2019Updated 7 years ago
- Generate malware traces for detection tests☆20Nov 2, 2026Updated last week
- An extendable tool to extract and aggregate IoCs from threat feeds☆33Feb 6, 2024Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Stuff for the DEFCON 23 Car Hacking Village Badge☆10Sep 1, 2015Updated 11 years ago
- VTC - Velociraptor Timeline Creator☆20May 15, 2024Updated 2 years ago
- ☆22Aug 31, 2022Updated 4 years ago
- Integrate Zeek with Alienvault OTX☆25Sep 11, 2020Updated 6 years ago
- Detection engineering with durable memory, a five-stage lifecycle, and an agentic surface — the sibling of ATHF.☆37Oct 14, 2026Updated 3 weeks ago
- Sigma detection rules for hunting with the threathunting-keywords project☆61Mar 2, 2025Updated last year
- Mindmap/CheatSheet for eLearnSecurity-PTPv5☆10Jun 18, 2020Updated 6 years ago
- Self-hosted multi-engine Sigma detection for event logs☆44Nov 1, 2026Updated last week
- Automated Malware Behavior Analysis Tool☆12May 13, 2026Updated 5 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- parse Tor consensus to generate google maps and google earth KML of tor relays☆22Feb 20, 2018Updated 8 years ago
- A list of IOCs applicable to PoshC2☆24Aug 3, 2020Updated 6 years ago
- Convert Sigma rules to Wazuh rules☆79Sep 13, 2025Updated last year
- A collection of Python utilities for use in scripts related to working with "indicators of compromise" (IOCs).☆16Dec 19, 2018Updated 7 years ago
- ☆19Mar 3, 2022Updated 4 years ago
- Python module for 8B10B encoding and decoding☆12Oct 26, 2026Updated 2 weeks ago
- Simple FM radio made on Arduino + RRD-102 V2 (RDA5807M)☆19Jan 8, 2015Updated 11 years ago
- GenAI-STIX2.1-Generator is a tool that leverages Azure OpenAI capabilities to transform threat intelligence reports from unstructured web…☆25Mar 24, 2025Updated last year
- ☆32Jun 27, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- DFIR forensics companion server + capture extension☆36Updated this week
- Security Onion + Automation + Response Lab including n8n and Velociraptor☆116Sep 14, 2022Updated 4 years ago
- 32 production-quality KQL detection rules for Microsoft Sentinel, mapped to MITRE ATT&CK for Cloud, credential access, lateral movement, …☆15Aug 1, 2026Updated 3 months ago
- Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.☆76Jan 18, 2022Updated 4 years ago
- Synapse Rapid Power-up for SinkDB☆11Jun 24, 2025Updated last year
- Official, curated detection content (Sigma, YARA, IOC packs) for the Rustinel endpoint detection engine.☆29Updated this week
- Suricata RPMs for CentOS/RHEL and Fedora☆19Oct 29, 2026Updated last week
Are these results useful?