Popular repositories

1. splunk_detect splunk_detect Public

   Forked from IntegralDefense/crits_splunk_detect

   operationalize your indicators of compromise, and send alerts/matches to ACE

   Python

2. elk_hunter elk_hunter Public

   Forked from IntegralDefense/elk_hunter

   A daemon to execute ElasticSearch queries and create ACE alerts based on the results.

   Python

3. sysmon-config sysmon-config Public

   Forked from SwiftOnSecurity/sysmon-config

   Sysmon configuration file template with default high-quality event tracing

4. elk_monitor elk_monitor Public

   There are plenty of tools available to monitor elasticsearch infrastructure, but knowing if certain logs are no longer being sent to elasticsearch is a problem I've seen across several companies. T…

   Python

5. yara_scanner yara_scanner Public

   Forked from IntegralDefense/yara_scanner

   A Python wrapper library for libyara and a local server for fully utilizing the CPUs of the system to scan with yara.

   Python

6. integraldefense.github.io integraldefense.github.io Public

   Forked from IntegralDefense/integraldefense.github.io