soar

There are 11 repositories under soar topic.

Shuffle
Shuffle / Shuffle
Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.
agplv3 automation cybersecurity discord hacktoberfest integrations mitre-attack openapi orchestration orchestrator orchestrator-gui security security-automation security-orchestrator shuffle soar workflow-editor
Language:Shell 1876
w5
w5teams / w5
Security Orchestration, Automation and Response (SOAR) Platform. 安全编排与自动化响应平台，无需编写代码的安全自动化，使用 SOAR 可以让团队工作更加高效
automation devops hack hacker hacking python-script python3 security security-audit security-automation security-tools shuffle soar tools w5 w5soar walkoff
Language:Python 1509
myide / see
基于开源组件（Inception & SQLAdvisor & SOAR）的SQL审核&SQL优化的Web平台
django inception mysql soar sqladvisor vue
Language:Vue 1478
cyb3rxp / awesome-soc
A collection of sources of documentation, as well as field best practices, to build/run a SOC
architecture cert csirt detection incident-response management mitre-attack purpleteam risk-management siem sirp soa soar soc tip ttp
1342
InQuest / ThreatIngestor
Extract and aggregate threat intelligence.
dfir fraud-detection indicators-of-compromise intelligence-gathering ioc malware-research misp osint security-tools soar threat-analysis threat-feeds threat-hunting threat-intelligence threat-intelligence-platform threat-sharing threatintel yara
Language:Python 851
strontic / xcyclopedia
Encyclopedia for Executables
executable siem soar command-line exe lolbins ssdeep
Language:PowerShell 436
catalyst
SecurityBrewery / catalyst
⚡️ Catalyst is a self-hosted, open source incident response platform and ticket system that helps to automate alert handling and incident response processes
soar incident-response digital-forensics dfir
Language:Vue 382
Admyral-Technologies / admyral
🤖 Admyral enables continuous control monitoring for any custom control
ai-assistant automation compliance-as-code compliance-automation compliance-platform control copilot cybersecurity gpt grc llm nextjs open-source python security security-automation security-compliance soar typescript workflow
Language:Python 323
utmstack / UTMStack
Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.
compliance siem security security-audit incident-response log-analysis log-parsing malware-detection security-tools threat-analysis threat-detection threat-hunting threat-intelligence security-automation cmmc hipaa soar soc2 security-operations-center soc
Language:Java 247
aquasecurity / postee
Notice: Postee is no longer under active development or maintenance.
jira aqua docker kubernetes opa rego slack soar automation cloud-native security devsecops messaging golang
Language:Go 209
guanguans / laravel-soar
SQL optimizer and rewriter for laravel. - laravel 的 SQL 优化器和重写器。
clockwork debug debugbar laravel laravel-sql mysql optimize optimizer ray rewrite rewriter security-vulnerabilities soar sql sql-optimizer statement
Language:PHP 189
guanguans / soar-php
SQL optimizer and rewriter. - SQL 优化器、重写器(辅助 SQL 调优)。
soar sql mysql debug php sql-injection sqlalchemy sql-query sql-optimizer optimizer optimization-tools
Language:PHP 170
jimi
z1pti3 / jimi
Jimi is an automation first no-code platform designed and developed originally for Security Orchestration and Response. Since its launch jimi has developed into a fully fledged IT automation platform which effortlessly integrates with your existing tools unlocking the potential for autonomous IT and Security operations.
asset-management automation it-automation jimi monitoring no-code orchestration secops security soar workflow-automation xdr
Language:Python 165
hequan2017 / seal
django-base-templates 主要为 django 开发DEMO, 支持非前后端分离和前后端分离模式。
django cmdb dev ops devops python vue iview iview-admin graphql graphql-django restful-api restful kubernetes webssh kubernetes-dashboard python3 sql goinception soar
Language:Python 126
influx-code / iysql
IYSQL - Improve Your SQL
optimization-tools soar sql sqladvisor
Language:CSS 102
paulveillard / cybersecurity-SOAR
A collection of awesome framework, libraries, learning tutorials, videos, webcasts, technical resources and cool stuff about Security Orchestration, Automation and Response (SOAR).
soar orchestration orchestration-services scalability incident-response incident-management cyber-threat-intelligence security-hardening os-hardening ios-hacking hacking-tools siem design-patterns scalable-applications incident-matrix compliance-as-code compliant regulatory
95
bytedance / Elkeid-HUB
Elkeid HUB is a rule/event processing engine maintained by the Elkeid Team that supports streaming/offline (not yet supported by the community edition) data processing. The original intention is to solve complex data/event processing and external system linkage requirements through standardized rules.
rule-engine soar stream-processing event-engine ruleengine
Language:Python 94
ibmresilient / resilient-community-apps
Source code for IBM SOAR Apps that are available on our App Exchange
apps ibm open-source resilient soar apphost resilient-circuits
Language:ReScript 91
zercurity / zercurity
Manage, monitor and improve your cyber security posture.
osquery compliance cis-benchmark linux macos siem soar windows steampipe
Language:Shell 89
malwarekid / SOAR-Flow
SOAR Automation with Shuffle, Wazuh & TheHive | This project integrates Shuffle SOAR, Wazuh SIEM, and TheHive to automate security incident response. It enriches alerts using VirusTotal & AbuseIPDB, creates incidents in TheHive, and sends real-time Discord notifications.
cybersecurity shuffle siem soar soc thehive wazuh
81
guanguans / think-soar
SQL optimizer and rewriter extension package for thinkphp5/6 framework.
soar sql mysql debug
Language:PHP 80
luduslibrum / awesome-playbooks
A curated repository of incident response playbooks
cybersecurity incident-response playbook security-automation security-orchestration soar
Language:PowerShell 74
AI0TSec / Blog
I wish the world continues to be lively, I wish you and me are still you and me.
ai apt blockchain-technology bypass cloud-computing deception-defense deep-learning devsecops emergency-response iot penetration-testing sdl security-hardening soar web-security
70
COSSAS / SOARCA
SOARCA - The Open Source CACAO-based Security Orchestrator!
automation cacao cacao-playbooks cybersecurity soar
Language:Go 67
zbn
zbnio / zbn
安全编排与自动化响应平台
soar zbn zbnio tools security security-tools security-automation hacker hackerrank-python python3 hacking automation
Language:Python 60
ansorren / GDPatrol
A Lambda-powered Security Orchestration framework for AWS GuardDuty
aws aws-lambda cloud cloudsecurity aws-security aws-guardduty soar incident-response cybersecurity threatintel siem blueteam
Language:Python 52
tuckner / automation-capability-matrix
A tool that allows you to document and assess any security automation in your SOC
automation blueteam-tools cybersecurity infosec soar
Language:TypeScript 46
cookpad / deepalert
Serverless SOAR (Security Orchestration, Automation and Response) framework for automatic inspection and evaluation of security alert
aws go security serverless soar
Language:Go 45
ibmresilient / resilient-python-api
Python Library for the IBM SOAR REST API, a Python SDK for developing Apps for IBM SOAR and more...
ibm open-source python resilient resilient-circuits soar resilient-sdk
Language:Python 41
soarpkgs
pkgforge / soarpkgs
📦📀 Soar User Repository: Making Linux Packaging truly Portable, Simple, and Distro-Independent
apkbuild appbundle appimage appimages build-system flatimage package-management package-manager pkgbuild portable portable-executable recipes runimage rust soar pkgsrc
Language:Shell 34
fkie-cad / Logprep
log data pre processing, generation and shipping in python
etl kafka log logdata loggenerator logshipper opensearch preprocessing python soar sre
Language:Python 31
lookup-editor_scripts
mthcht / lookup-editor_scripts
scripts using splunk application lookup-editor endpoint. Download, upload and update splunk lookups content
api lookup lookup-table splunk lookup-editor splunkcloud automation lookups soar update upload
Language:Python 29
13ihsan92 / Security-Blue-Team
This repository will describe the details surrounding the SIEM (wazuh) mini project, which will cover all aspects of topology design, deployment, rules, integration, and fine tune.
automation cybersecurity defend defense defensive-security endpoint-security siem siem-development soar defence defender-for-endpoint defensive security-automation security-hardening security-tools
23
secmon-lab / alertchain
Simple SOAR (Security Orchestration, Automation and Response) framework integrated with OPA/Rego
opa rego security-tools soar
Language:Go 23
banhao / AutoSpamEmailScan
AutoSpamEmailScan.ps1 is used to monitor a specific mailbox that enterprise users can forward suspicious spam emails to a specific mailbox.
phishing phishing-detection spam spam-detection esa ironport ews-api soar spam-emails quarantine security security-automation securex workflow virustotal google-safe-browsing automation mdatp minemeld
Language:PowerShell 16
GlideClient / client
An updated version of SoarClient
client minecraft mixin nanovg soar soarclient java lwjgl
Language:Java 16

soar

Shuffle / Shuffle

w5teams / w5

myide / see

cyb3rxp / awesome-soc

InQuest / ThreatIngestor

strontic / xcyclopedia

SecurityBrewery / catalyst

Admyral-Technologies / admyral

utmstack / UTMStack

aquasecurity / postee

guanguans / laravel-soar

guanguans / soar-php

z1pti3 / jimi

hequan2017 / seal

influx-code / iysql

paulveillard / cybersecurity-SOAR

bytedance / Elkeid-HUB

ibmresilient / resilient-community-apps

zercurity / zercurity

malwarekid / SOAR-Flow

guanguans / think-soar

luduslibrum / awesome-playbooks

AI0TSec / Blog

COSSAS / SOARCA

zbnio / zbn

ansorren / GDPatrol

tuckner / automation-capability-matrix

cookpad / deepalert

ibmresilient / resilient-python-api

pkgforge / soarpkgs

fkie-cad / Logprep

mthcht / lookup-editor_scripts

13ihsan92 / Security-Blue-Team

secmon-lab / alertchain

banhao / AutoSpamEmailScan

GlideClient / client