Discover jorritfolmer/TA-messagetracking-for-cisco-esa Open Source

This repository has been archived on 08/Oct/2020
Stars
1
Language
Created about 6 years ago
Updated about 6 years ago

jorritfolmer

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Convert cisco:esa:textmail logs into clean message tracking events with rich metadata for Splunk Enterprise Security

puppet-splunk

Deploy Splunk instances on Windows and Linux in simple, distributed or (multisite) clustered topologies. Demoed by Splunk at .conf2017

Puppet

EDRevals

Splunk app to compare Endpoint Detection and Response solutions based on MITRE ATT&CK evaluations (APT3, APT29, Carbanak + FIN7, Wizard Spider + Sandworm)

TA-dmarc

Add-on for ingesting DMARC aggregate reports into Splunk

Python

TA-defender-atp-hunting

Add-on to onboard telemetry data via Microsoft Defender ATP hunting API in Splunk (ES)

Python

TA-ad-assets-identities

Dump all users, groups and computers from an Active Directory domain into an asset and identities lookup usable by Splunk Enterprise Security.

Python

TA-netflow-logstash

CIM compliant TA to enable Netflow v5, v9 and IPFIX events in Splunk (Enterprise Security)

TA-bro-ids

CIM compliant TA to enable Bro IDS events in Splunk

TA-oscap-oval

TA for evaluating RHEL and SLES OVAL definitions for Splunk

XSLT

TA-p0f

TA-p0f (passive os fingerprinting tool) for Splunk

TA-vsftpd

CIM compliant TA to enable vsftpd events in Splunk (Enterprise Security)

TA-mbsa

Microsoft Baseline Security Analyzer add-on for Splunk

Batchfile

TA-skybox

Technical add-on for Splunk to query Skybox Security API

Python

nessus2json

Convert Nessus XML export to JSON for use in Tableau or Power BI

Python

TA-mysql-audit

MySQL audit add-on for Splunk

TA-suricata

CIM compliant TA to enable Suricata events in Splunk (Enterprise Security)

TA-windows-filtering-platform

CIM compliant TA to enable Windows firewall events (5156)

TA-w32time

TA-w32time for Splunk

jorritfolmer/TA-messagetracking-for-cisco-esa

jorritfolmer

Reviews

Repository Details

More Repositories