secops4thewin Goto Github PK

securitytrails-python

Python 2.7 wrapper for the securitytrails api.

sigma

Generic Signature Format for SIEM Systems

smartraveller

splunk_ta_msdns

This will hold the repo for the Splunk TA that was demonstrated at .conf2016

studynotes

ta-adpermissions

AD Permission Enumerator for Splunk

ta-applocker

This Splunk add-on is used to index and parse AppLocker logs.

ta-canary

This Splunk add on collects Canary.tools device data through APIs and allow you to programatically delete and acknowledge tickets.

ta-dnsetw

This app leverages the krabsetw framework to compile an executable for DNS logging. This app can be used with Splunk.

ta-greynoise

This add on leverages the Adaptive Response framework to allow users to query IP addresses against the Greynoise.io API

ta-intezer

This app leverages the Adaptive Response framework to search against the intezer analyze APIs

ta-ipv6-search

This app creates a custom search command in Splunk to search ipv6 ranges

ta-javelin-protect

This add-on provides parsing configuration for Javelin Protect https://www.javelin-networks.com/

ta-sans_isc

This app was created to provide an adaptive response action in Splunk leveraging the SANS ISC API

ta-search_splunk

This app leverages the Adaptive Response framework to allow searches to be issued automatically.

ta-securitytrails

This app leverages the Adaptive Response framework to perform API calls to Security Trails

ta-shodan-arf

Shodan Adaptive Response Action for Splunk

ta_autoruns

This Splunk Add-On runs autoruns command line edition and parses the data ready for use in Splunk

threatminerpy

This repo houses the python code for threatminer.

uipath-rpamacrosigning

This project is a file that runs you through the process of automatically signing office files

windnsetw

This app leverages the krabsetw framework to compile an executable for DNS logging. This executable can be used with Splunk.

wineandcheesemap