KPN-CISO/EIQ-to-DATP

Stars
1
Language
Python
License
GNU General Publi...
Created over 4 years ago
Updated about 3 years ago

KPN-CISO/EIQ-to-DATP

KPN-CISO

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Take an EclecticIQ outgoing feed and put indicators into Microsoft Defender ATP

kpn-security-policy

KPN Security Policy

AttackMatrix

AttackMatrix is a Python module and/or webpage to interact with and explore MITRE's ATT&CK's matrices.

shamir-secret

A set of commandline tools for creating and recovering Shamir Secret Shares.

certificate-inventory-powershell

Scanner which is capable of scanning multiple hosts or multiple subnets on an SSL port and output a CSV file with the certificate details.

DRA_writeup

Writeup of the Oracle DSR stack buffer overflow vulnerability (DRA) CVE-2014-6598

certificate-inventory

Scanner which is capable of scanning multiple hosts or multiple subnets on an SSL port and output a CSV file with the certificate details.

netchecker

A tool for checking if IPv4/IPv6 addresses and CIDRs belong to specific netblocks (ASes). This is particularly useful when checking if your netblocks/ASes occur in dumps/leaks (e.g. for Threat Intel purposes).

Network-Detection

A collection of network detection methods and rules.

pq-wg-theory

Post-quantum Wireguard (Theory)

sftpdropzone

SFTP Dropzone and secure data extraction example

eiqlib

A python3 library for interacting with EclecticIQ

VTcheck

VirusTotal checker

MISP-to-EIQ

MISP JSON to EIQ JSON converter

OTO

Opleiden Trainen Oefenen (Education, Training, Exercise)

EIQ-to-IDS

Toolkit to take an EclecticIQ JSON outgoing feed, extract the useful observables and transform those into IDS rulesets.

DATP-to-EIQ

Ingest Microsoft Defender ATP alerts into EclecticIQ as Incidents and Sightings

CVE-2019-9745

Write-up on the CVE-2019-9745 vulnerability.

aiki

aiki.go source code