Run Velociraptor on Security Onion
☆42Jul 27, 2022Updated 4 years ago
Alternatives and similar repositories for securityonion-velociraptor
Users that are interested in securityonion-velociraptor are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Security Onion + Automation + Response Lab including n8n and Velociraptor☆116Sep 14, 2022Updated 4 years ago
- Integrating Sysinternals Autoruns’ logs into Security Onion☆31Feb 20, 2024Updated 2 years ago
- Scripts to automatically import threat intel into QRadar☆15Jun 20, 2019Updated 7 years ago
- Docker image for Velocidex Velociraptor☆149Apr 15, 2026Updated 5 months ago
- Mapping Corelight or Zeek data to Elastic Common Schema logs☆11Updated this week
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆13Jan 15, 2026Updated 8 months ago
- ☆22Aug 29, 2024Updated 2 years ago
- CLI generator for Velociraptor offline collector☆17Sep 15, 2026Updated last week
- vTunnel is a tool that proxies IP traffic between guest and host networks by using the VSOCK protocol.☆28Mar 19, 2024Updated 2 years ago
- PowerShell Script for Agentless Incident Response☆25Apr 5, 2018Updated 8 years ago
- MalwareAnalysis☆12Dec 19, 2020Updated 5 years ago
- A project that aims to automate Volatility3 at scale with the use of cloud strength and the power of KQL inside ADX.☆16Aug 19, 2025Updated last year
- This is a tutorial for a data-secure home surveillance system with notifications to mobile devices.☆13Mar 14, 2022Updated 4 years ago
- Cumulonimbus-UAL_Extractor is a PowerShell based tool created by the Tesorion CERT team to help gather the Unified Audit Logging out of a…☆21Oct 25, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆16Oct 24, 2024Updated last year
- 一个简单的由dhcp+http+tftp组合的pxe远程部署工具。☆11Sep 20, 2019Updated 7 years ago
- Documentation used for Shuffle☆21Updated this week
- This is a repository from Adam Swan and I's presentation on Windows Logs Zero 2 Hero.☆22Jan 30, 2018Updated 8 years ago
- Android build for HTC Passion (Nexus One)☆20Jun 6, 2014Updated 12 years ago
- Sophos Central PowerShell module☆12Jul 11, 2023Updated 3 years ago
- Defence Against the Dark Arts☆35Sep 15, 2019Updated 7 years ago
- This project is a SIEM with SIRP and Threat Intel, all in one.☆463Nov 20, 2024Updated last year
- A Python SDK for Imperva SecureSphere Open API☆14Sep 21, 2023Updated 3 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- ☆14Mar 28, 2022Updated 4 years ago
- The Stamus Networks App for Splunk allows Splunk Enterprise users to extract information and insights from both the Stamus Security Plat…☆13Jul 31, 2026Updated last month
- A repo to centralize some of the regular expressions I've found useful over the course of my DFIR career.☆109Mar 12, 2026Updated 6 months ago
- Documentation site for Velociraptor☆72Updated this week
- Workflows for Shuffle☆25Oct 26, 2022Updated 3 years ago
- ☆23Jun 1, 2022Updated 4 years ago
- PyVelociraptor contains the python bindings for the Velociraptor API.☆23May 5, 2026Updated 4 months ago
- Zeek support for Community ID flow hashing.☆37Jul 11, 2023Updated 3 years ago
- Old home of LimaCharlie, open source EDR☆32Aug 2, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Repo with supporting material for the talk titled "Cracking the Beacon: Automating the extraction of implant configurations"☆11Feb 6, 2025Updated last year
- Setup of NGINX, and turning it into a Reverse Proxy with hardened rules/settings.☆11Apr 22, 2020Updated 6 years ago
- Microsoft 365 Advanced Hunting Queries with hotlinks that plug the query right into your tenant.☆132Feb 10, 2026Updated 7 months ago
- ☆17Nov 3, 2017Updated 8 years ago
- Integration tools for TheHive and Azure Sentinel☆13Sep 23, 2020Updated 6 years ago
- Tool Analysis Result Sheet☆358Dec 4, 2017Updated 8 years ago
- Sentinel Threat Intelligence Upload Toolkit☆18Jul 15, 2024Updated 2 years ago