tuckner Goto Github PK

acm-soc

The SOC Automation Capability Matrix

ansible

Ansible is a radically simple IT automation platform that makes your applications and systems easier to deploy. Avoid writing scripts or custom code to deploy and update your applications— automate in a language that approaches plain English, using SSH, with no agents to install on remote systems.

ansible-art

Action Plugin for Ansible as an execution framework for Atomic Red Team by Red Canary

ansible-tower-playbooks

atc-react

A knowledge base of actionable Incident Response techniques

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

attack-navigator-layers

Collection of ATT&CK research with ATTT&CK Navigator layers

automation-capability-matrix

A tool that allows you to document and assess any security automation in your SOC

awesome-detection-engineering

A list of useful Detection Engineering-related resources.

bolt-docker

A container that runs Slack Bolt to receive message events and send to a webhook

chronicle-rules

cuckoo-bot

Simple Slack bot to submit hashes to a Cuckoo Sandbox instance

detection-rules

Rules for Elastic Security's detection engine

dsmap

Mapping for data sources to visibility files for the DeTT&CT project

evtx-attack-samples

Windows Events Samples

f5-elk

Logstash Configs and Kibana Dashboards for F5 LTM & ASM

netwitness-urlscan

Context Menu for RSA NetWitness to search for a domain on urlscan.io

presentations

Resources and recordings for various presentations

python-tines

Tines API Wrapper

quickstart-snyk-security

AWS Quick Start Team

reallyawesomeprogram

script-demo

sigma

Generic Signature Format for SIEM Systems

sooty

The SOC Analysts all-in-one CLI tool to automate and speed up workflow.

terraform-templates

This repo contains Terraform templates to deploy infrastructure on AWS and Azure and to secure them using the Palo Alto Networks Next Generation Firewalls

tines-connect

ngrok container to use with Tines

tines-deploy-actions

An example of how to deploy Tines stories using Github Actions and Terraform

tines-example-stories

A collection of Tines example stories as export files and Terraform.

vagrant-check-point

Vagrantfile for turning up Check Point firewall lab environments

vagrant-cisco-asav