Azure function to insert MISP data in to Azure Sentinel
☆34Oct 19, 2022Updated 4 years ago
Alternatives and similar repositories for misp-to-sentinel
Users that are interested in misp-to-sentinel are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Microsoft Sentinel, Defender for Endpoint - KQL Detection Packs☆54Jul 20, 2023Updated 3 years ago
- Feed Generator for MISP☆19Nov 2, 2022Updated 4 years ago
- Send High & New Incidents to The Hive incident management Platform☆18Feb 13, 2021Updated 5 years ago
- Best practices in threat intelligence☆49Nov 6, 2022Updated 4 years ago
- Repo for experimenting and testing MCP server builds for CTI-related research.☆27May 13, 2025Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Quick method to extract Indicators of Compromise (IOCs) from a Threat Intel Report in PDF format.☆15Apr 26, 2026Updated 6 months ago
- Various tools used to monitor and troubleshoot Azure Sentinel data☆31Oct 24, 2024Updated 2 years ago
- ☆14Feb 22, 2021Updated 5 years ago
- Miscellaneous Azure Sentinel files that don't fall into other categories.☆12Aug 23, 2021Updated 5 years ago
- Aftermath is a free macOS incident response framework☆35Sep 25, 2025Updated last year
- Scripts for importing threat feeds and CTI articles, blogs, and reports into MISP.☆18Jun 28, 2026Updated 4 months ago
- Sentinel BEC IR☆14Aug 18, 2022Updated 4 years ago
- 32 production-quality KQL detection rules for Microsoft Sentinel, mapped to MITRE ATT&CK for Cloud, credential access, lateral movement, …☆15Aug 1, 2026Updated 3 months ago
- Sentinel Recon Tools Workbook☆14Aug 24, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Distributed nmap.☆13May 25, 2023Updated 3 years ago
- ☆15Feb 9, 2022Updated 4 years ago
- Python CLI tool for rapid IOC analysis (IPs, Domains, CVEs) using 6 free Threat Intel APIs. Outputs: Color-coded Excel, JSON, CSV. Uses: …☆27Oct 28, 2026Updated last week
- Open Source Platform for storing, organizing, and searching documents related to cyber threats☆174Nov 10, 2023Updated 2 years ago
- Integration tools for TheHive and Azure Sentinel☆13Sep 23, 2020Updated 6 years ago
- IOC Collection 2022☆57Mar 7, 2023Updated 3 years ago
- Powershell Script to enumerate AzureAD and output good data☆13Nov 8, 2023Updated 2 years ago
- Misc. content for Microsoft Sentinel☆17Apr 12, 2024Updated 2 years ago
- Azure Sentinel Template parser☆16Nov 2, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Convert MISP events to Elastalert rules☆12Aug 10, 2021Updated 5 years ago
- Install SANS SIFT Workstation on Ubuntu 22.04 ARM64 (Apple Silicon / UTM)☆10Apr 2, 2026Updated 7 months ago
- Cyber Defence related kusto queries for use in Azure Sentinel and Defender advanced hunting☆69Apr 1, 2026Updated 7 months ago
- Hints for the Kusto Detective Agency - Season 2☆10Aug 15, 2023Updated 3 years ago
- The SOC Entity Triage workbook is designed to enhance the triage process for security operation centers (SOCs) by providing a comprehensi…☆10Mar 19, 2024Updated 2 years ago
- Automated review process for your Azure AD guest accounts.☆17Sep 22, 2020Updated 6 years ago
- misc brain dump of ansible playbooks☆13Aug 4, 2023Updated 3 years ago
- ☆20Oct 23, 2020Updated 6 years ago
- ☆22Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A dataset containing Office 365 Unified Audit Logs for security research and detection☆67Aug 12, 2026Updated 2 months ago
- Self-hosted multi-engine Sigma detection for event logs☆43Updated this week
- A walkthrough of creating and using the Azure environment and Microsoft Sentinel to track attacks and plot attacks on a live map.☆24Mar 26, 2023Updated 3 years ago
- A list of IOCs applicable to PoshC2☆24Aug 3, 2020Updated 6 years ago
- Built a mini HoneyNet in Azure and ingest log sources from various resources into a Log Analytics workspace☆25Jul 19, 2023Updated 3 years ago
- Cybersecurity Incidents Mind Maps☆34Sep 29, 2021Updated 5 years ago
- ☆18Mar 26, 2024Updated 2 years ago