KPN-CISO/DATP-to-EIQ

Stars
1
Language
Python
License
GNU General Publi...
Created over 4 years ago
Updated about 3 years ago

KPN-CISO/DATP-to-EIQ

KPN-CISO

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Ingest Microsoft Defender ATP alerts into EclecticIQ as Incidents and Sightings

kpn-security-policy

KPN Security Policy

AttackMatrix

AttackMatrix is a Python module and/or webpage to interact with and explore MITRE's ATT&CK's matrices.

shamir-secret

A set of commandline tools for creating and recovering Shamir Secret Shares.

certificate-inventory-powershell

Scanner which is capable of scanning multiple hosts or multiple subnets on an SSL port and output a CSV file with the certificate details.

DRA_writeup

Writeup of the Oracle DSR stack buffer overflow vulnerability (DRA) CVE-2014-6598

certificate-inventory

Scanner which is capable of scanning multiple hosts or multiple subnets on an SSL port and output a CSV file with the certificate details.

netchecker

A tool for checking if IPv4/IPv6 addresses and CIDRs belong to specific netblocks (ASes). This is particularly useful when checking if your netblocks/ASes occur in dumps/leaks (e.g. for Threat Intel purposes).

Network-Detection

A collection of network detection methods and rules.

pq-wg-theory

Post-quantum Wireguard (Theory)

sftpdropzone

SFTP Dropzone and secure data extraction example

eiqlib

A python3 library for interacting with EclecticIQ

VTcheck

VirusTotal checker

MISP-to-EIQ

MISP JSON to EIQ JSON converter

OTO

Opleiden Trainen Oefenen (Education, Training, Exercise)

EIQ-to-IDS

Toolkit to take an EclecticIQ JSON outgoing feed, extract the useful observables and transform those into IDS rulesets.

EIQ-to-DATP

Take an EclecticIQ outgoing feed and put indicators into Microsoft Defender ATP

CVE-2019-9745

Write-up on the CVE-2019-9745 vulnerability.

aiki

aiki.go source code