wvru Goto Github PK

ansible-for-devops

Ansible for DevOps examples.

ansible-hardening

Ansible role for security hardening. Mirror of code maintained at opendev.org.

ansible-role-docker

Ansible Role - Docker

ansible-role-elasticsearch

Ansible Role - Elasticsearch

ansible-role-kubernetes

Ansible Role - Kubernetes

atc-react

A knowledge base of actionable Incident Response techniques

automatedlab

AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to 2022, some Linux distributions and various products like AD, Exchange, PKI, IIS, etc.

awesome-elasticsearch

A curated list of the most important and useful resources about elasticsearch: articles, videos, blogs, tips and tricks, use cases. All about Elasticsearch!

cis-ubuntu-20.04-ansible

Ansible Role to Automate CIS v1.1.0 Ubuntu Linux 18.04 LTS, 20.04 LTS Remediation

deepbluecli

docker-elk

The Elastic stack (ELK) powered by Docker and Compose.

domain_stats

elastalert2

ElastAlert 2 is a continuation of the original yelp/elastalert project. Pull requests are appreciated!

elk-docker

Elasticsearch, Logstash, Kibana (ELK) Docker image

freq

This is a repository for freq.py and freq_server.py

getmissingupdates

helk

The Hunting ELK

logstash

Contains Logstash related content including tons of Logstash configurations

logstash-patterns-core

malcolm

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files) and Zeek logs.

nsm

This repository is created to add value to existing Network Security Monitoring solutions.

python-http

redelk

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

showmethepackets

Useful network monitoring, analysis, and active response tools used or mentioned in the SANS SEC503 course (https://www.sans.org/course/intrusion-detection-in-depth)

sigma

Generic Signature Format for SIEM Systems

sof-elk

Configuration files for the SOF-ELK VM, used in SANS FOR572

sysmon-config

Sysmon configuration file template with default high-quality event tracing

sysmon-modular

A repository of sysmon configuration modules

windows-event-forwarding

A repository for using windows event forwarding for incident detection and response

zeek-junk-drawer

Zeek Junk Drawer - Just some scripts and a place to put them