secops4thewin Goto Github PK

acsc2017

ansible-role-osquery

Ansible role to install osquery

asdessential8app

australiankmzfiles

A repo to host KMZ files for use in visualization apps.

canary_app

This app is used to visualise data generated from Canary Tools Devices.

conf2016

Files that were talked about for .conf2016. This will include powerpoints, lookups etc.

d3_tree_viz

D3 Collapsible Tree

data_generator

Using Gogen from coccyx

detection-rules

Rules for Elastic Security's detection engine

devo-relay

devodetections

Mitre Att&ck Navigator layout for Devo

devorsyslogconfigurations

A repo to store rsyslog configuration for automation purposes

docker-domain_stats

This github repo holds a Dockerfile to automatically build Mark Baggets Domain Stats python server. https://github.com/MarkBaggett/domain_stats/tree/master/domain_stats

docker_domain_stats

Contains dockerfile to build domain_stats.py as an image

ecs

Elastic Common Schema

elastic-security-workshop

eventloggingpolicy

Group policy event logging policy with settings and reasons.

force_directed_viz

D3 Force Directed visualization for Splunk.

gogen

Highly configurable and scalable data generator for testing or demo data

greynoise-python

A python wrapper for greynoise v2 API.

invoke-usersimulator

Simulates common user behaviour on local and remote Windows hosts.

link_analysis_app

Link Analysis App for Splunk.

mitreattackdetectionsbydatasource

Shows Detections by Mitre Data Source

phairlockdigital

Phantom App For Airlock Digital

phgreynoise

A phantom app for Greynoise

phintezeranalyze

Phantom Cyber App for Intezer Analyze. https://analyze.intezer.com/

phipinfo

This is the Phantom Cyber app for IP Info

phsecuritytrails

Phantom Cyber app for Security Trails

phthreatminer

This github repo will house the Phantom Cyber app for Threat Miner

security-ws-labs

Elastic Security Workshop Labs