chrisdfir

chrisdfir

Geek Repo

Company:Cisco Talos Incident Response

Location:Orlando

Home Page:https://infosec.exchange/@chrisdfir

Twitter:@chrisdfir

Github PK Tool:Github PK Tool

chrisdfir's repositories

sysmon2splunk

The method and files used to generate Sysmon event logs, push them to a remote Splunk, and ingest/normalize the data for analysis.

Stargazers:9Issues:0Issues:0

WSL2overAnyConnect

These instructions will allow a user to maintain Internet connectivity in WSL2 after using Cisco AnyConnect.

Stargazers:4Issues:0Issues:0

VPCFlowTH

Splunk dashboard to support analysis of VPC Flow logs from AWS

Stargazers:2Issues:0Issues:0

companies-hiring-security-remote

This repo is meant to be a list of companies that hire security people full remote.

License:MITStargazers:0Issues:0Issues:0

NetProc

Correlates running processes to point-in-time network traffic for triage analysis of Windows hosts.

Language:PythonLicense:MITStargazers:0Issues:0Issues:0