LogRhythm-Labs/Extract-Remote-File-SmartResponse

Stars
9
Rank 1,939,727 (Top 39 %)
Language
PowerShell
License
MIT License
Created almost 8 years ago
Updated almost 8 years ago

LogRhythm-Labs/Extract-Remote-File-SmartResponse

LogRhythm-Labs

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

PowerShell Script / SmartResponse to extract files from remote Windows hosts

PIE

📫 The Phishing Intelligence Engine - An Active Defense PowerShell Framework for Phishing Defense with Office 365

Sigma

Convert Sigma rules to LogRhythm searches

VirusTotal

🐛 VirusTotal SIEM Integration and Automation

Carbon-Black-SmartResponse

💥 Carbon Black SIEM Integration and Automation for LogRhythm

Endpoint-Lockdown

🔒 Isolate a host from the network using PowerShell

Invoke-Okta

🌀 Okta + LogRhythm SIEM = Integration and Automation

System-Monitor-Agent-Maintenance

Utilize PowerShell remoting to perform automated SCSM agent maintenance

PIE-Button

🔘 Phishing Intelligence Engine Microsoft Outlook Add-In

Playbooks_CaseAPI

Playbook manipulation via API

SRP-DisableLocalWindowsAccount

Disables an account on a local Windows system

SRP-Fortinet

SmartResponse plugin to add IPs and FQDNs to an Address Group.

SRP-VirusTotal

"On-demand" VirusTotal file/URL scanning via the LogRhythm Web Console

SRP-KillWindowsProcess

SmartResponse plugin to terminate a process on a Windows host.

ATTACK_STIX_analysis

A collection of scripts for analysis of the MITRE ATT&CK framework via STIX/TAXII

Jupyter Notebook

FireEye_breach_artifacts

extracted IOCs and MITRE technique analysis from the December 2020 FireEye breach

SRP-Nmap

Nmap SIEM Integration and Automation for LogRhythm

sunburst_iocs

List of IOCs from CISA STIX feed related to Alert AA20-352A

purple_team_cases

Create purple team master Case and per-MITRE-technique Cases for purple team exercise

Jupyter Notebook

log4Shell

LogRhythm resources for log4Shell detection.

Twilio-SMS-SmartResponse

☎️ SMS Messaging PowerShell Script Using Twilio

SRP-CiscoISE

SmartResponse plugin to quarantine a host via Cisco ISE

SRP-AddItemToList

Add an item to a text file to be consumed by the LogRhythm Job Manager

LR-attack-navigator-layer

MITRE ATT&CK Navigator layer displaying technique coverage in the MITRE ATT&CK KB Module