leche671 Goto Github PK

apm

Elastic Application Performance Monitoring - resources and general issue tracking for Elastic APM.

attack-navigator

Web app that provides basic navigation and annotation of ATT&CK matrices

attack-website

MITRE ATT&CK Website

attack_range

A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk

awesome-ml-for-cybersecurity

:octocat: Machine Learning for Cyber Security

awesome-threat-detection

A curated list of awesome threat detection and hunting resources

beats

:tropical_fish: Beats - Lightweight shippers for Elasticsearch & Logstash

binderhub

Run your code in the cloud, with technology so advanced, it feels like magic!

bloodhound

Six Degrees of Domain Admin

bzar

A set of Zeek scripts to detect ATT&CK techniques.

car

Cyber Analytics Repository

cimsweep

CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.

cortex-analyzers

Cortex Analyzers Repository

cti

Cyber Threat Intelligence Repository expressed in STIX 2.0

cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system

deepbluecli

elasticsearch

Free and Open, Distributed, RESTful Search Engine

helk

The Hunting ELK

hollows_hunter

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

jupyterhub

Multi-user server for Jupyter notebooks

kibana

Your window into the Elastic Stack

mordor

Re-play Adversarial Techniques

notebook

Jupyter Interactive Notebook

openioc-to-stix

Generate STIX XML from OpenIOC XML

oriana

Oriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The results are presented in a Web layer to help defenders identify outliers and suspicious behavior on corporate environments.

python-stix

A Python library for parsing, manipulating, and generating STIX content.

revoke-obfuscation

PowerShell Obfuscation Detection Framework

rita

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

securityonion

Security Onion 2 - Linux distro for threat hunting, enterprise security monitoring, and log management

securityonion-docs