csirt

There are 4 repositories under csirt topic.

cyb3rxp / awesome-soc
A collection of sources of documentation, as well as field best practices, to build/run a SOC
cert csirt detection soc siem sirp soa soar tip architecture incident-response management mitre-attack purpleteam risk-management ttp
1265
intelmq
certtools / intelmq
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
cybersecurity threat ioc malware phishing cert csirt intelligence incident-response alerts feeds incident handling automation ihap python
Language:Python 985
Spacial / awesome-csirt
Awesome CSIRT is an curated list of links and resources in security and CSIRT daily activities.
security csirt awesome awesome-list malware-analysis threat-intelligence pentesting exfiltration secure-programming cve poc reverse-engineering exploits
Language:C 484
karton
CERT-Polska / karton
Distributed malware processing framework based on Python, Redis and S3.
karton cert csirt pipeline malware-analysis malware-research cybersecurity
Language:Python 395
NVISOsecurity / evtx-hunter
evtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files.
threat-hunting evtx incident-response infosec netsec csirt
Language:Python 148
adulau / DomainClassifier
DomainClassifier is a Python (2/3) library to extract and classify Internet domains/hostnames/IP addresses from raw unstructured text files following their DNS existence, localization or attributes.
csirt data-mining location-discovery network-security python-library
Language:Python 78
D4-project / BGP-Ranking
BGP ranking is a free software to calculate the security ranking of Internet Service Provider (ASN)
bgp network-security network-monitoring csirt csirt-activities d4-project bgp-ranking
Language:Python 69
CERTCC / VINCE
VINCE is the Vulnerability Information and Coordination Environment developed and used by the CERT Coordination Center to improve coordinated vulnerability disclosure. VINCE is a Python-based web platform.
api cert coordination csirt django psirt python vulnerability vulnerability-identification vulnerability-management
Language:Python 59
CERT-Polska / training-materials
training-materials infosec csirt cert training thehive misp moloch intelmq malware incident-response investigation
Language:PHP 50
CERT-Bund / IRNetTools
Incident Response Network Tools
csirt cert incident-response incident-handling network-tools automated-processing ip-address-lookup ip-address-geolocation
Language:Python 24
CERT-Bund / yara-exporter
Exporting MISP event attributes to yara rules usable with Thor apt scanner
analysis apt cert csirt incident-response misp scanner thor yara
Language:Python 24
GEANT / TRANSITS
Home for TRANSITS materials
csirt training-materials
22
eremit4 / cs-discovery
Detecting Cobalt Strike Team Servers on targets through traffic telemetry.
cobalt-strike cobaltstrike cobaltstrike-detection command-and-control csirt python threat-hunting threat-intelligence
Language:Python 20
CZ-NIC / convey
CSV processing and web related data types mutual conversion
csv whois csirt e-mail spreadsheet base64 regular-expressions converting-units aggregation xlsx ods json webservice
Language:Python 18
csirt-tooling-org / csirt-tooling-best-practices
CSIRT Tooling: Best Practices in Developing, Maintaining and Distributing Open Source Tools
csirt csirt-tooling
Language:Shell 16
csirt-tooling-org / tooling-directory
Tools used by CSIRT and especially in the scope of CNW
cert csirt tooling-directory
16
Badware
JMousqueton / Badware
Ransomware for demonstration
ransomware malware csirt redteam demo powershell
Language:PowerShell 15
Intevation / intelmq-mailgen
IntelMQ command line tool to process events and send out email notifications.
csirt incident-response intelmq mail-notification
Language:Python 9
CERT-Polska / karton-config-extractor
Static configuration extractor for the Karton framework
cert csirt cybersecurity karton malware-analysis malware-research pipeline
Language:Python 8
CERTUNLP / ngen
Incident Response Management System
csirt incident-management incident-response rtir security
Language:JavaScript 8
FIRSTdotorg / automation-sig-www
Automation SIG
automation csirt soc cert cybersecurity incident-response threat-hunting threat-intelligence
Language:Python 8
CERT-Polska / karton-classifier
File type classifier for the Karton framework.
karton malware-analysis malware-research pipeline cybersecurity cert csirt
Language:Python 7
cudeso / ics-csirt-website
Website of https://www.ics-csirt.io/
cert csirt ics scada
Language:CSS 7
CERT-Polska / karton-autoit-ripper
AutoIt script ripper for Karton framework
autoit cert csirt cybersecurity karton malware-analysis malware-research pipeline
Language:Python 6
CERT-Polska / karton-dashboard
A small Flask application that allows for Karton task and queue introspection.
cert csirt cybersecurity karton malware-analysis malware-research pipeline
Language:HTML 6
CERT-Polska / karton-archive-extractor
Extractor of various archive formats for Karton framework
cert csirt cybersecurity karton malware-analysis malware-research pipeline
Language:Python 5
CERT-Polska / karton-yaramatcher
File and analysis artifacts yara matcher for Karton framework
karton malware-analysis malware-research pipeline cybersecurity cert csirt yara
Language:Python 5
MonaxGT / awesome-R-cyber-security
awesome-R-cyber-security
analytics cert csirt cybersecurity r security soc threat threat-hunting threat-intelligence
4
CERT-Polska / karton-asciimagic
Various decoders for ascii-encoded executables for Karton framework
karton malware-analysis pipeline cybersecurity cert csirt malware-research
Language:Python 3
CERT-Polska / karton-mwdb-reporter
Karton service that uploads analyzed artifacts and metadata to MWDB Core
karton malware-analysis malware-research pipeline cybersecurity cert csirt mwdb-core mwdb
Language:Python 2
sebix / ansible-intelmq
Ansible role to install IntelMQ (work in progress)
ansible osint automation intelmq csirt cert
2
colvert-project / colvert
Manage your detection use cases portfolio
django django-application django-project management mitre-attack python python3 soc detection-use-cases colvert cert csirt csirt-activities csirt-tooling bootstrap5 siem siem-tools detection-rules
Language:Python 1
EnvoyProject / envoyctl
cli app to control the Envoy Project app
csirt threatintel golang go
Language:Go 1
ninoseki / first-csirt-basic-course-md
Markdown version of the FIRST CSIRT Basic Course https://www.first.org/education/trainings
csirt infosec
1
scandale-project / RSTORE
Report Storage and Tracking of Observations and Records Efficiently
csirt evidences kvrocks observations vulnerability-lookup
Language:Python 1
Mehdi0x90 / CVE-Radar
A small program to monitor the latest published vulnerabilities and also match it with the desired brands and products and announce it to email, Discord, etc.
bug bugbounty cert csirt cve cybersecurity exploit information-security infosec monitoring nvd patch pentesting python redteam vulnerability
Language:Python 0

csirt

cyb3rxp / awesome-soc

certtools / intelmq

Spacial / awesome-csirt

CERT-Polska / karton

NVISOsecurity / evtx-hunter

adulau / DomainClassifier

D4-project / BGP-Ranking

CERTCC / VINCE

CERT-Polska / training-materials

CERT-Bund / IRNetTools

CERT-Bund / yara-exporter

GEANT / TRANSITS

eremit4 / cs-discovery

CZ-NIC / convey

csirt-tooling-org / csirt-tooling-best-practices

csirt-tooling-org / tooling-directory

JMousqueton / Badware

Intevation / intelmq-mailgen

CERT-Polska / karton-config-extractor

CERTUNLP / ngen

FIRSTdotorg / automation-sig-www

CERT-Polska / karton-classifier

cudeso / ics-csirt-website

CERT-Polska / karton-autoit-ripper

CERT-Polska / karton-dashboard

CERT-Polska / karton-archive-extractor

CERT-Polska / karton-yaramatcher

MonaxGT / awesome-R-cyber-security

CERT-Polska / karton-asciimagic

CERT-Polska / karton-mwdb-reporter

sebix / ansible-intelmq

colvert-project / colvert

EnvoyProject / envoyctl

ninoseki / first-csirt-basic-course-md

scandale-project / RSTORE

Mehdi0x90 / CVE-Radar