yampelo / beagle
Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.
☆1,271Updated last year
Related projects ⓘ
Alternatives and complementary repositories for beagle
- An information security preparedness tool to do adversarial simulation.☆1,097Updated 5 years ago
- Extract and aggregate threat intelligence.☆830Updated 9 months ago
- Re-play Security Events☆1,601Updated 7 months ago
- FAME Automates Malware Evaluation☆859Updated 2 weeks ago
- An informational repo about hunting for adversaries in your IT environment.☆1,716Updated 2 years ago
- Online hash checker for Virustotal and other services☆808Updated 5 months ago
- ☆1,049Updated 5 years ago
- Detect Tactics, Techniques & Combat Threats☆2,062Updated this week
- Your Everyday Threat Intelligence☆1,739Updated this week
- Actionable analytics designed to combat threats☆972Updated 2 years ago
- Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.☆899Updated 10 months ago
- Open Source Security Events Metadata (OSSEM)☆1,238Updated last year
- AIL framework - Analysis Information Leak framework. Project moved to https://github.com/ail-project☆1,304Updated this week
- Virtual Machine for Adversary Emulation and Threat Hunting☆1,247Updated 4 years ago
- A Splunk app mapped to MITRE ATT&CK to guide your threat hunts☆1,137Updated last year
- Praetorian's public release of our Metasploit automation of MITRE ATT&CK™ TTPs☆718Updated 4 years ago
- Real-time, container-based file scanning at enterprise scale☆878Updated 3 weeks ago
- A collection of resources for Threat Hunters☆852Updated 3 weeks ago
- A toolset to make a system look as if it was the victim of an APT attack☆2,463Updated last year
- Utilities for MITRE™ ATT&CK☆1,010Updated 5 months ago
- Windows Events Attack Samples☆2,244Updated last year
- Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term o…☆2,381Updated last month
- A Powershell incident response framework☆1,558Updated last year
- YARA signature and IOC database for my scanners and tools☆2,476Updated this week
- A collection of sources of indicators of compromise.☆802Updated last month
- Cyber Analytics Repository☆905Updated 7 months ago
- Investigate malicious Windows logon by visualizing and analyzing Windows event log☆2,728Updated 4 months ago
- Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…☆1,954Updated this week
- An Active Defense and EDR software to empower Blue Teams☆1,236Updated last year
- Indicators of Compromises (IOC) of our various investigations☆1,646Updated last week