aceilies Goto Github PK

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

awesome-honeypots

an awesome list of honeypot resources

code_snippets

Regex

content_demisto

Demisto is now Cortex XSOAR. Automate and orchestrate your Security Operations with Cortex XSOAR's ever-growing Content Repository. Pull Requests are always welcome and highly appreciated!

deepbluecli

fir

Fast Incident Response

incident-playbook

GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]

introlabs

These are the labs for my Intro class. Yes, this is public. Yes, this is intentional.

irm

Incident Response Methodologies 2022

qradar-2-thehive-alert

Scripts to push IBM QRadar events to TheHive IRP

resilient-community-apps

Open-source and community extensions for Resilient

resilient-python-api

Python library modules for Resilient APIs

resilient-python-examples

Python examples using the Resilient REST API and Action Module

resilient-reference

Developer documentation for Resilient APIs

resilient-scripts

Example scripts and rules for use in Resilient playbooks.

resilient-servicenow

work in progress

ssl-osint-tool

synapse

Synapse: a Meta Alert Feeder for TheHive, a Security Incident Response Platform

sysmonsimulator

Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detections and correlation rules by Blue teams.