stressboi Goto Github PK

auth0-tenant-security-hands-on-workshop

This Auth0 reference implementation uses Terraform to configure an Auth0 tenant with a solid base of security features enabled to help protect against common password attacks + an express.js app to test that these protections works.

check-log4j

To determine if a host is vulnerable to log4j CVE‐2021‐44228

hafnium-exchange-splunk-csvs

IOCs found exploiting CVE-2021-26855 thanks to info from Volexity and MS and Huntresslabs.

malwrlookup-master

okta-identity-cloud-for-splunk

Public REPO for splunkbase app

okta_quarantine_script

A script using Okta's Python SDK to manipulate application sign-on policy for quarantine group membership

sa-ctf_scoreboard

security_content

Splunk Security Content

splunk-spectre-meltdown-uf-script

A script modified from speed47 to provide KV-pair results into a Splunk UF scripted input

sysmon-config

Sysmon configuration file template with default high-quality event tracing

sysmon-modular

A repository of sysmon configuration modules

ta-check-logforj

Simple Splunk TA wrapper for https://github.com/stressboi/check-log4j

ta-drovorub

Simple Splunk UF detection for Drovorub kernel module

ta-forwarderping

UF ping TA

ta-hrs

ta-microsoft-wlan-autoconfig

Splunk Technical Add-On to properly onboard the Microsoft-Windows-WLAN-AutoConfig/Operational log in XML format.

ta-microsoft-wxtcmd

ta-okta-identity-cloud-jb

ta-pcsverchecker

Simple Splunk UF scripts in shell and powershell to report on Pulse Secure Connect versions encountered.

ta-rcanary

Simple ransomware canary for Splunk UF on Windows

ta-remote_endpoint_info

A Splunk TA to grab local endpoint metadata using the UF

ta-samedit

tripwire-enterprise-unofficial-ta

A CIM compliant TA for .CSV DCR files from Tripwire Enterprise