annettefo

gmc

Splunk Global Monitoring Console

awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

cloud-datamodel-security-research

A data model for cloud providers (AWS, GCP, Azure) based on security use cases

prefect

A modern data workflow platform

splunk-connect-for-syslog

Splunk Connect for Syslog

TA-DUOSecurity2FA

Splunk TA for indexing DUO 2 factor activity logs

annettefo.github.io

annettequ_auth0

black-tie-with-me

botsv2

Splunk Boss of the SOC version 2 dataset.

car

Cyber Analytics Repository

cloud-custodian

Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system

DeTTECT

Detect Tactics, Techniques & Combat Threats

docker-splunk

Docker Splunk Enterprise image

dr_robot

This tool can be used to enumerate the subdomains associated with a company by aggregating the results of multiple OSINT (Open Source Intelligence) tools.

fluency_import_api

Fluency event import API

fluent-lambda

Fluent interfaces for creating lambda expressions in Java

great_expectations

Always know what to expect from your data.

lolcat

Rainbows and unicorns!

opencensus-go-exporter-ocagent

OpenCensus Go exporters for OpenCensus Agent

PhantomAdvancedImplementation

playbooks

Phantom Orchestration Playbooks

railgun

rules

Repository of yara rules

SA-RBA

Risk Based Alerting Supporting Add-On (SA) for Splunk

security_content

Splunk Security Content

splunk-sdk-python

Splunk Software Development Kit for Python

SplunkUBAThreatFeedsviaGist

xori

Xori is an automation-ready disassembly and static analysis library for PE32, 32+ and shellcode