weslambert/securityonion-elastalert-rules

Stars
1
Language
Created almost 7 years ago
Updated over 6 years ago

weslambert/securityonion-elastalert-rules

weslambert

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

DinoSOARLab

Security Onion + Automation + Response Lab including n8n and Velociraptor

velociraptor-docker

Docker image for Velocidex Velociraptor

velocistack

securityonion-velociraptor

Run Velociraptor on Security Onion

securityonion-misp

securityonion-strelka

misp2elastalert

Convert MISP events to Elastalert rules

securityonion-sigma

securityonion-limacharlie

Send logs from LimaCharlie to Security Onion

securityonion-sublime

Ingest Sublime email alerts into Security Onion

velociraptor-misp

Artifacts for integrating MISP with Velociraptor

SOCtopus

securityonion-otx

securityonion-rita

otx2elastic

Dockerized method to pull OTX thread feed data to enrich data in Elasticsearch

misp2elastic

Dockerized method to pull threat intel from MISP and use it to enrich Elasticsearch data via Logstash and Memcached

securityonion-docker-airgap

securityonion-xforce

e2

securityonion-docker-registry

sguil-pivots

presentations

securityonion-n8n

Install n8n on Security Onion to assist with automating context gathering and response

securityonion-cloud

velociraptor-ecs

ECS Mappings for Velociraptor Artifacts

securityonion-airgap

securityonion-grr

securityonion-misp-docker

hive2elastic

Correlate TheHive cases with events in Elasticsearch utilizing Logstash and Memcached