Alternatives and similar repositories for misp-to-sentinel

Users that are interested in misp-to-sentinel are comparing it to the libraries listed below

• humio / security_monitoring
  ☆42Updated 2 years ago
• invictus-ir / Blue-team-app-Office-365-and-Azure
  ☆73Updated 10 months ago
• Digital-Defense-Institute / triage.zip
  A preconfigured Velociraptor triage collector
  ☆52Updated last week
• cudeso / misp-tip-of-the-week
  A collection of tips for using MISP.
  ☆74Updated 8 months ago
• mgreen27 / mcp-velociraptor
  VelociraptorMCP is a Model Context Protocol bridge for exposing LLMs to MCP clients.
  ☆43Updated 2 months ago
• msdirtbag / azurevelo
  Velociraptor Server hosted in Azure App Service
  ☆56Updated 2 months ago
• microsoft / tim-data-investigate-platform
  TIM is a Kusto investigation platform that enables a user to quickly pivot between data sources; annotate their findings; and promotes co…
  ☆23Updated last year
• reversinglabs / reversinglabs-siem-rules
  A collection of various SIEM rules relating to malware family groups.
  ☆69Updated last year
• Ruler-Project / ruler-project
  Remote access and Antivirus Logging Database
  ☆42Updated last year
• biffalo / easy-wins-endpoint-defense
  Collection of scripts/resources/ideas for attack surface reduction and additional logging to enable better threat hunting on Windows endp…
  ☆38Updated last year
• swisscom / Invoke-Forensics
  Invoke-Forensics provides PowerShell commands to simplify working with the forensic tools KAPE and RegRipper.
  ☆115Updated last year
• mthcht / ThreatHunting-Keywords-sigma-rules
  Sigma detection rules for hunting with the threathunting-keywords project
  ☆56Updated 5 months ago
• jischell-msft / RemoteManagementMonitoringTools
  Collection of Remote Management Monitoring tool artifacts, for assisting forensics and investigations
  ☆93Updated last week
• MHaggis / notes
  Full of public notes and Utilities
  ☆128Updated 6 months ago
• DCScoder / ESXiTri
  ESXi Cyber Security Incident Response Script
  ☆25Updated 11 months ago
• LivingInSyn / RMML
  A list of RMMs designed to be used in automation to build alerts
  ☆112Updated 4 months ago
• olafhartong / MDE-AuditCheck
  MDE relies on some of the Audit settings to be enabled
  ☆98Updated 3 years ago
• socprime / the-prime-hunt
  A browser extension for threat hunting that provides one UI for different SIEMs/EDRs and simplifies investigation
  ☆77Updated last year
• LaresLLC / SysmonConfigPusher
  Pushes Sysmon Configs
  ☆88Updated 4 years ago
• cudeso / proof-value-cti
  Repository documenting how Threat Intelligence and / or a Threat Intelligence Platform can prove its value to an organisation.
  ☆51Updated 10 months ago
• tesorion / TCERT-Cumulonimbus-UAL_Extractor
  Cumulonimbus-UAL_Extractor is a PowerShell based tool created by the Tesorion CERT team to help gather the Unified Audit Logging out of a…
  ☆21Updated last year
• 00010111 / smbtimeline
  ☆35Updated 10 months ago
• mdecrevoisier / Splunk-input-windows-baseline
  Provides an advanced input.conf file for Windows and 3rd party related software with more than 70 different event log mapped to the MITRE…
  ☆92Updated last month
• huntresslabs / threat-intel
  This repository contains supplemental items including IOCs, and signatures discussed in Huntress blogposts, and other media.
  ☆42Updated last month
• pfpt-andrew / Rapid-Response-Reporting
  RRR (Rapid Response Reporting) is a collection of Incident Response Report objects. They are designed to help incident responders provid…
  ☆37Updated 3 years ago
• certeu / droid
  A pySigma wrapper to manage detection rules.
  ☆40Updated 2 weeks ago
• f-bader / EntraID-ErrorCodes
  Entra ID (Azure AD) error codes as JSON
  ☆15Updated last year
• Neo23x0 / Talks
  Slides of my public talks
  ☆56Updated last year
• MISP / SkillAegis
  SkillAegis is a platform to design, run, and monitor exercise scenarios, enhancing skills in applications like MISP and training users in…
  ☆30Updated this week
• 0x706972686f / RMM-Catalogue
  ☆101Updated last month