daveherrald Goto Github PK

adversarysimulation

Compilation of resources to help with Adversary Simulation automation harness

asgrotate

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

attack_range

A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk

botsv1

Splunk Boss of the SOC v1 data set.

discord.js

A powerful JavaScript library for interacting with the Discord API

log4j-affected-db

A community sourced list of log4j-affected software

metamerge

noisy-sysmon

A very noisy (i.e. not for production use) Microsoft Sysmon configuration file that includes "name" metadata for every event.

pizza42

Auth0 Solutions Engineer Technical Challenge

sa-attck_nav

Splunk App for MITRE Att&CK Navigator(TM)

sa-nocache

A simplistic Splunk app to disable js/css minification and server side caching. Useful for development systems. Do NOT use in production.

sa-rsearch

Custom search commands for Splunk to allow limited and controlled access to restricted indexes and lookups.

sa-ti_showcase

SANS CTI 2017 Cyber Threat Intelligence Victory Garden Companion App for Splunk

sa_plaso-app-for-splunk

scansio-sonar-splunk

Python scripts to download, parse, and enrich scans.io study data and load into Splunk for research, threat intelligence gathering, and security operations.

slick

the last carousel you'll ever need

splunk_ta_fortinet_tech

Splunk Add-On for Fortinet Technologies. Technology add-on (TA) for Splunk to handle machine-generated data from Fortinet products.

suprcontext

ta-cyberchef

A set of Splunk workflow action definitions to export field values to CyberChef for further analysis.

ta_plaso-add-on-for-splunk