weslambert / velociraptor-docker
Docker image for Velocidex Velociraptor
☆118Updated 7 months ago
Alternatives and similar repositories for velociraptor-docker:
Users that are interested in velociraptor-docker are comparing it to the libraries listed below
- Security Onion + Automation + Response Lab including n8n and Velociraptor☆107Updated 2 years ago
- This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.☆106Updated last year
- ☆5Updated 3 months ago
- Repository of public reference frameworks for the DFIR community.☆115Updated last year
- ☆86Updated last year
- Run Velociraptor on Security Onion☆37Updated 2 years ago
- Rules generated from our investigations.☆193Updated 3 months ago
- Tools for simulating threats☆181Updated last year
- ☆66Updated 2 months ago
- SentinelOne STAR Rules☆56Updated last week
- SIEGMA - Transform Sigma rules into SIEM consumables☆146Updated last year
- Incident Response documents and tooling☆68Updated last year
- An opensource sigma conversion tool built using pysigma☆115Updated 2 months ago
- Implementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.☆200Updated 2 years ago
- A repository of my own Sigma detection rules.☆157Updated 5 months ago
- A Ruleset to enhance detection capabilities of Ossec using Sysmon☆88Updated 2 years ago
- Full of public notes and Utilities☆97Updated last week
- A collection of tips for using MISP.☆74Updated 2 months ago
- User Feedback Space of #MitreAssistant☆37Updated last year
- A browser extension for threat hunting that provides one UI for different SIEMs/EDRs and simplifies investigation☆76Updated 9 months ago
- Repository of attack and defensive information for Business Email Compromise investigations☆246Updated 3 weeks ago
- A repository to share publicly available Velociraptor detection content☆126Updated this week
- A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters …☆182Updated 2 weeks ago
- Pointing cybersecurity teams to thousands of detection rules and offensive security tests aligned with common attacker techniques☆131Updated 11 months ago
- Technical add-on for Splunk related to TheHive/Cortex from TheHive project☆52Updated 3 weeks ago
- Open Source Platform for storing, organizing, and searching documents related to cyber threats☆162Updated last year
- ☆51Updated 9 months ago
- Resources To Learn And Understand SIGMA Rules☆174Updated 2 years ago
- Project based on RegRipper, to extract add'l value/pivot points from TLN events file☆84Updated last week
- CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable repor…☆223Updated last year