amirzargaran Goto Github PK

alerting

📟 Get notified when your data meets certain conditions by setting up monitors, alerts, and notifications

alertlogic_waf4cef

This is customized ArcSight Syslog Flex Connector file for normalizing the Web Application Firewall of Alert Logic Events and converting to CEF (Common Event Format) format.

arcsight-parsers

ArcSight parsers

arcsight-thehive-alert

And now, for the first time, you can send alerts via action from ArcSight ESM Console to the TheHive when Correlation Rules are triggered.

arcsight-zulip-alert

In the ArcSight ESM, you can send the results of matched correlation rules as an ExecuteCommand type. One of the best messaging platforms is Zulip. This repository helps you to integrate ArcSight ESM and Zulip by ExecuteCommand alert action.

arcsight_vs_paloalto

This is A parser file in ArcSight Integration Flex Connector for PaloAlto Devices.

arcsight_vs_solarwinds

this code is a .properties file that can parse all db activities of Solarwinds Mssql Server to ArcSight Destination from SmartConnectors

arcsight_vs_zabbix

this code is a .properties parser flex Connector file that can parse all zabbix activities to ArcSight Destination from SmartConnectors

cefforwallix

This repository is a parser file for converting raw syslog events of Wallix PAM system to CEF(Common Event Format) format.

cortex

Cortex: a Powerful Observable Analysis and Active Response Engine

elastalert2

ElastAlert 2 is a continuation of the original yelp/elastalert project. Pull requests are appreciated!

ibmbigfix_vs_arcsight

ldap2cef

This Parser is ArcSight Flex File Connector for OpenLdap V3 Sevice Logs

misp

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

nginx_vs_arcsight

Flex Connector Parser for Nginx Web Server

opensearch

🔎 Open source distributed and RESTful search engine.

opensearch-build

🧰 OpenSearch / OpenSearch-Dashboards Build Systems

ossec_vs_arcsight

this code is a .properties file that can parse all db activities of ossec mysql db to ArcSight Destination from SmartConnectors

sophos_mail_gateway_for_arcsight_cef

This is a Flex File Connector Parser for Sophos UTM Email Gateway

sophos_utm_for_cef

This is a parser upon CEF syslog ArcSight Flex Connector for Sophos UTM devices. you can use this *.properties file in ArcSight Smart Connector as syslog listener connector for normalization and converting the raw syslog events sent from Sophos appliance to CEF format.

splunkenizer

Ansible framework providing a fast and simple way to spin up complex Splunk environments.

ta-thehive-cortex

Technical add-on for Splunk related to TheHive/Cortex from TheHive project

thehive

TheHive: a Scalable, Open Source and Free Security Incident Response Platform

threathunting

A Splunk app mapped to MITRE ATT&CK to guide your threat hunts

threatingestor

Extract and aggregate threat intelligence.