weslambert Goto Github PK

aftermath

Aftermath is a free macOS IR framework

aptsimulator

A toolset to make a system look as if it was the victim of an APT attack

audit

Collection of Audit and Compliance related VQL artifacts

auto-duo

beats

:tropical_fish: Beats - Lightweight shippers for Elasticsearch & Logstash

bluecloud

Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D. Azure and AWS terraform support.

bro-otx

Integrate Bro with Alienvault OTX

bro-scripts

Various Bro scripts

car

Cyber Analytics Repository

chopchopgo

Rapidly Search and Hunt through Linux Forensics Artifacts

codie

cortex-analyzers

Cortex Analyzers Repository

cortexdocs

Documentation of Cortex

cyberchef-server

A server providing RESTful access to CyberChef

detectionlab

Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices

dinosoarlab

Security Onion + Automation + Response Lab including n8n and Velociraptor

dockerfiles

Dockerfiles for the official Elastic Stack images

e2

elastalert

Easy & Flexible Alerting With ElasticSearch

elastalert-docker

Docker image with Elastalert on Alpine Linux.

elastalert2

ElastAlert 2 is a continuation of the original yelp/elastalert project. Pull requests are appreciated!

elasticsearch

Free and Open, Distributed, RESTful Search Engine

fido

fir

Fast Incident Response

fir-powershell

Fast Incident Response API Client: PowerShell Example

flare

An analytical framework for network traffic and behavioral analytics

fsf

File Scanning Framework

go-sigma-rule-engine

Golang library that implements a sigma log rule parser and match engine.

grr

GRR Rapid Response: remote live forensics for incident response

hadoop-pcap

Hadoop library to read packet capture (PCAP) files