alias454's repositories
ansible-splunk-playbook
Install a full Splunk Enterprise Cluster or Universal forwarder using an ansible playbook
graylog-zeek-content-pack
BRO/Zeek IDS content pack contains pipeline rules, a stream, a dashboard displaying interesting activity, and a syslog tcp input to capture and index BRO/Zeek logs coming from a remote sensor.
sec-airflow-ingester
Use Airflow to pull in remote data via API, pub/sub, kinesis, s3 etc. and then store it in s3 for later consumption by other services.
graylog-formula
Salt formula to manage graylog installations on RHEL and Debian based systems.
bro-formula
A saltstack formula to install BRO network security monitor on RHEL or Debian based systems
graylog-fortinet-content-pack
Fortigate UTM content pack contains extractors, a stream, a dashboard displaying the last 24 hours of activity, and a syslog tcp input.
graylog-zimbra-extractor
Set of extractors for Zimbra email servers
mongodb-formula
Salt formula to install MongoDB on RHEL or Debian based distros
splunk-cluster-commander
A salt formula for setting up and maintaining Splunk Enterprise on RHEL or Debian based systems.
elasticsearch-formula
Salt formula to install Elasticsearch on RHEL or Debian based systems
firewall-formula
Salt formula to handle firewalld or iptables basic firewall functionality
MISP-deploy
Install MISP on RHEL based VMs
osquery-formula
A saltstack formula to install osquery on RHEL or Debian based systems.
Splunk-Patch-and-Reboot-Fabric-Script
Fabric script to help manage OS patching for Splunk enterprise clusters.
MISP-docker
Docker image for MISP and MISP modules
pfring-formula
A saltstack formula to install pf_ring on RHEL and Debian based systems.
terraform-aws-baseline
Configure baseline AWS account settings and create necessary resources for secure account provisioning.
zeek-formula
A saltstack formula to install ZEEK network security monitor on RHEL or Debian based systems
suricata-formula
A saltstack formula to install suricata on RHEL or Ubuntu based systems
almalinux-systemd
AlmaLinux Systemd Container Images for testing builds that require systemd
Graylog_Sysmon
Advanced Threat detection Configurations for Graylog
misp
Docker image for MISP
rss-syphon
RSS-Syphon is an XML feed scraper that allows searching through returned RSS posts with customizable keywords
saltshaker
GUI For SaltStack
vmware-tools-formula
Salt formula to install vmware-tools on RHEL/CentOS/Debian based systems