Repository navigation
π What's New in v1.1.0
β‘ Major Features
π― 51 MITRE ATT&CK Techniques (was 21)
Expanded coverage across all 14 tactics including:
- Collection (T1560, T1119, T1213)
- Defense Evasion (T1562, T1036, T1218)
- Impact (T1485, T1490, T1489)
- And 30 more techniques!
π VirusTotal Integration
Enrich IOCs with threat intelligence (free tier):
alert2action alert.json --enrich --vt-key YOUR_API_KEYπ€ TheHive Export
Export directly to TheHive case format:
alert2action alert.json -o thehive > case.jsonπ§ Splunk CIM Support
Native support for 50+ Splunk Common Information Model fields.
π¦ Install / Update
npm install -g alert2action@1.1.0Full Docs: https://github.com/notsointresting/alert2action#readme