defensivedepth Goto Github PK

attack-navigator

Web app that provides basic navigation and annotation of ATT&CK matrices

cortex-analyzers

Cortex Analyzers Repository

cyber-security-hub.github.io

Cyber Security Trainings

defensive-intel

elastalert

Easy & Flexible Alerting With ElasticSearch

elastic-agent-event-filters

Project to convert Sysmon config filters to Elastic Agent - Defend Integration filters

endoflife.date

Informative site with EoL dates of everything

evtx2es

A library for fast import of Windows Eventlogs into Elasticsearch.

fleet

Open-source platform for IT, security, and infrastructure teams. (Linux, macOS, Chrome, Windows, cloud, data center)

fleet-docker

integrations

Elastic Integrations

jamfprotect

A repository for open-source resources created for use with or alongside Jamf Protect.

kratos

Next-gen identity server (think Auth0, Okta, Firebase) with Ory-hardened authentication, MFA, FIDO2, TOTP, WebAuthn, profile management, identity schemas, social sign in, registration, account recovery, passwordless. Golang, headless, API-only - without templating or theming headaches. Available as a cloud service.

launcher-packager

One-shot container that generates customized [Launcher] osquery packages

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

opencanary

Modular and decentralised honeypot

osquery

SQL powered operating system instrumentation, monitoring, and analytics.

osquery-filters

osquery_sysmon_config_update

ossec-hids

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

pertinax

Integrating Sysinternals Autoruns’ logs into Security Onion

pysigma

Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)

pysigma-backend-elasticsearch

pySigma Elasticsearch backend

rwwiv

sample-html

⛵ App Platform sample HTML application.

securityonion

Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, and case management. It also includes other tools such as Playbook, osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.

securityonion-docker-hh

securityonion-elsa-extras

securityonion-image

securityonion-setup