Open Cybersecurity Alliance's repositories
kestrel-lang
Kestrel threat hunting language: building reusable, composable, and shareable huntflows across different data sources and threat intel.
stix-shifter
This project consists of an open source library allowing software to connect to data repositories using STIX Patterning, and return results as STIX Observations.
documentation
This repository contains Enablement Documentation (STIX Shifter), Workgroup documents and materials (Endpoint), Working documents and output from the "Architecture Working Group", Architecture workgroup meeting minutes and recordings
kestrel-huntbook
This repository hosts community contributed Kestrel huntflows (.hf) and huntbooks (.ipynb)
oasis-open-project
Information relating to the governance of the Open Cybersecurity Alliance (OCA) OASIS Open Project. https://github.com/opencybersecurityalliance
cacao-roaster
A web application for generating, parsing and validating, manipulating, and visualizing CACAO v2.0 playbooks.
kestrel-analytics
This repository hosts community contributed Kestrel analytics
kestrel-jupyter
Kestrel Jupyter Notebook Kernel
kestrel-as-a-service
Kestrel container and deployable cloud-managed hunting service for large organizations
black-hat-us-2022
Kestrel Blue Team Lab for Black Hat USA 2022
federated-search-end-to-end-testing
Open-source integration testing framework to test hunting stacks with live data sources
data-bucket-kestrel
Bucket to Store Data for Kestrel Repo, Test, Demo, and More