haam3r

SysmonWEF

Deploying Sysmon and WEF

mmquery

A command line utility for querying the MatterMost API for various auditing or reporting purposes

cuckclean

Cleanup script for Cuckoo Sandbox

PowerShell

Collection of PowerShell scripts

vmcloak

Automated Virtual Machine Generation and Cloaking for Cuckoo Sandbox.

CheatSheets

cloud-on-k8s

Elastic Cloud on Kubernetes

compliance

Legal, procedural and policies document templates for operating an IRT

cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system

cuckoo-salt

SaltStack formula for deploying Cuckoo Sandbox

flare-vm

integrations

Elastic Integrations

intelmq

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

iTee_docker_hello

mm-user-report

MatterMost user reporting

moloch

Moloch is an open source, large scale, full packet capturing, indexing, and database system.

oh-my-zsh

A delightful community-driven (with 1,000+ contributors) framework for managing your zsh configuration. Includes 200+ optional plugins (rails, git, OSX, hub, capistrano, brew, ant, php, python, etc), over 140 themes to spice up your morning, and an auto-update tool so that makes it easy to keep up with the latest updates from the community.

openssh-formula

postfix-cuckoolyse

A Postfix filter which takes a piped message and submits it to Cuckoo Sandbox

rf_ids_lab1_init

RF_IDS_Lab1_Scripts

RFVTA_IDS_Lab1

RFVTA_IDS_Lab2

salt

Software to automate the management and configuration of any infrastructure or application at scale. Get access to the Salt software package repository here:

Security-Datasets

Re-play Security Events

sigma

Generic Signature Format for SIEM Systems

TheHive4py

Python API Client for TheHive

TheHiveHooks

This is a python tool aiming to make using TheHive webhooks easier.

vim-sensible

sensible.vim: Defaults everyone can agree on

xWindowsEventForwarding

DSC Module to manage Windows Event Forwarding