ag-michael

Inboxscanner

Scan outlook inbox with yara rules,APIs and IOCs

EmailScanner

EmailScanner is an integration application in python that uses `exchangelib` to process mail items in Microsoft exchange.

chronicle-sigma-rules

A repository for public sigma rules converted for Google Chronicle

pyfalcon

Crowdstrike Falcon streaming api client in python

phishingkits

A repository to collect phishingkits discovered in the wild

Cortex-Analyzers

Cortex Analyzers Repository

OTX-pulse-export

Export IOCs from your AlienVault OTX subscription

thehive-falcon

Falcon streaming api alert integration for TheHive

detection-rules

Collection of YARA-L 2.0 sample rules for the Chronicle Detection API

OpenPhish

Open URLs and files in a separate analysis VM

ansible-harden

harden system (linux, unix...)

ansible-os-hardening

This Ansible role provides numerous security-related configurations, providing all-round base protection.

chophound

Some scripts to support with importing large datasets into BloodHound

content

Demisto is now Cortex XSOAR. Automate and orchestrate your Security Operations with Cortex XSOAR's ever-growing Content Repository. Pull Requests are always welcome and highly appreciated!

cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system

malware-sourcecode

MISP

MISP (core software) - Open Source Threat Intelligence and Sharing Platform (formely known as Malware Information Sharing Platform)

MISP-STIX-Converter

A utility repo to assist with converting between MISP and STIX formats

MISP-Taxii-Server

An OpenTAXII Configuration for MISP

MISP-tools

Import CrowdStrike Threat Intelligence into your instance of MISP

NetsecSetup

NetsecSetup is a small python script made to integrate VPN,DNS and other network service setup and monitoring

RDPSpray

Tool for password spraying RDP

RHEL7-CIS

Ansible role for Red Hat 7 CIS Baseline

sigma

Generic Signature Format for SIEM Systems

wails

Create desktop apps using Go and Web Technologies.