ccdcoe

CDMCS

Cyber Defence Monitoring Course Suite :: Suricata, Arkime (and others in the past)

Frankencoding

You're busted!

Providentia

Providentia is a tool to manage (mostly) virtualized infrastructure knowledge. Born out of necessity to build the world's largest live-fire cyber exercise - Locked Shields - it can also be used to organize infrastructure or smaller scale exercises. Essentially it is used as a front-end for Ansible inventory.

frankenstack

Busted. With duct tape, spit and tears. Brought to you by beer.

go-peek

Simple streaming pre-processor and enrichment tool for structured logs.

roboblue

Automating The Blue Team

frankenSEC

xs-sigma-rules

Sigma rules transformed to our Frankenstack's liking.

alert-visualizer

Display connected Suricata alerts over multiple networks. Powered by d3 and elasticsearch.

EVE

Events Visualization Environment

vsphere-datascraper

Python VM data scraper using vSphere API

xs16-empire

generate some "real bad" traffic

zeeky

BMC

otta

Automated query engine for aol/moloch. Parse statistical data for known good queries, and publish to influxdb.

smurfParty

Run elasticsearch aggregation query against moloch sessions indices and visualize resulting data as matrices per blue team