Light

logrhythm-labs Goto Github PK

repos: 36.0 gists: 0.0

Type: Organization

logrhythm-labs's Projects

abuse.ch_ransomware_scraper

Scrapes the indicator lists from abuse.ch's Ransomware Tracker.

attack-navigator

Web app that provides basic navigation and annotation of ATT&CK matrices

attack_stix_analysis

A collection of scripts for analysis of the MITRE ATT&CK framework via STIX/TAXII

carbon-black-smartresponse

:boom: Carbon Black SIEM Integration and Automation for LogRhythm

covid19-domains

COVID-19 Malicious Domain List Importer

endpoint-lockdown

:lock: Isolate a host from the network using PowerShell

extract-remote-file-smartresponse

PowerShell Script / SmartResponse to extract files from remote Windows hosts

fireeye_breach_artifacts

extracted IOCs and MITRE technique analysis from the December 2020 FireEye breach

hafnium-iocs

Curated list of IOCs involving March 2021 Exchange 0 Day Attacks.

invoke-hue

:rotating_light: PowerShell Philips Hue Integration and Automation

invoke-okta

:cyclone: Okta + LogRhythm SIEM = Integration and Automation

invoke-wrike

:chart_with_upwards_trend: Wrike PowerShell API Integration and Automation

log4shell

LogRhythm resources for log4Shell detection.

lr-attack-navigator-layer

MITRE ATT&CK Navigator layer displaying technique coverage in the MITRE ATT&CK KB Module

lrlabs_oktaaietrendrules

AIE Trend Rules being released in conjunction with blog "Detecting Attacks and Compromises: A SIEM perspective from the recent LAPSUS$ supply chain attack"

microsoft-sysmon-config

Sysmon configuration file template with default high-quality event tracing

pie

:mailbox: The Phishing Intelligence Engine - An Active Defense PowerShell Framework for Phishing Defense with Office 365

pie-button

:radio_button: Phishing Intelligence Engine Microsoft Outlook Add-In

playbooks_caseapi

Playbook manipulation via API

powershell-dl-exec

:syringe: Download and Execute PowerShell scripts on remote hosts with ease.

psrecon

:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.

purple_team_cases

Create purple team master Case and per-MITRE-technique Cases for purple team exercise

siem-speak

:sound: 'Say' for Windows PowerShell

sigma

Convert Sigma rules to LogRhythm searches

srp-additemtolist

Add an item to a text file to be consumed by the LogRhythm Job Manager

srp-ciscoise

SmartResponse plugin to quarantine a host via Cisco ISE

srp-disableadaccount

Disables a specified Active Directory account using either default Job Manager credentials or specified credentials.

srp-disablelocalwindowsaccount

Disables an account on a local Windows system

srp-fortinet

SmartResponse plugin to add IPs and FQDNs to an Address Group.

srp-killwindowsprocess

SmartResponse plugin to terminate a process on a Windows host.

1
2

Recommend Projects

React

A declarative, efficient, and flexible JavaScript library for building user interfaces.
Vue.js

🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript

TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
TensorFlow

An Open Source Machine Learning Framework for Everyone
Django

The Web framework for perfectionists with deadlines.
Laravel

A PHP framework for web artisans
D3

Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

javascript

JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
web

Some thing interesting about web. New door for the world.
server

A server is a program made to process requests and deliver data to clients.
Machine learning

Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Visualization

Some thing interesting about visualization, use data art
Game

Some thing interesting about game, make everyone happy.

Recommend Org

Facebook

We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft

Open source projects and samples from Microsoft.
Google

Google ❤️ Open Source for everyone.
Alibaba

Alibaba Open Source for everyone
D3

Data-Driven Documents codes.
Tencent

China tencent open source team.