weslambert

velociraptor-docker

Docker image for Velocidex Velociraptor

DinoSOARLab

Security Onion + Automation + Response Lab including n8n and Velociraptor

velocistack

securityonion-velociraptor

Run Velociraptor on Security Onion

securityonion-sublime

Ingest Sublime email alerts into Security Onion

SOCtopus

securityonion-rita

Audit

Collection of Audit and Compliance related VQL artifacts

jamfprotect

A repository for open-source resources created for use with or alongside Jamf Protect.

python-apps

Apps to be used for Shuffle automation

securityonion-n8n

Install n8n on Security Onion to assist with automating context gathering and response

Tools

Distribute third party tools for use with Velociraptor

velociraptor

Digging Deeper....

aftermath

Aftermath is a free macOS IR framework

ChopChopGo

Rapidly Search and Hunt through Linux Forensics Artifacts

dockerfiles

Dockerfiles for the official Elastic Stack images

elastalert2

ElastAlert 2 is a continuation of the original yelp/elastalert project. Pull requests are appreciated!

elasticsearch

Free and Open, Distributed, RESTful Search Engine

go-sigma-rule-engine

Golang library that implements a sigma log rule parser and match engine.

integrations

Elastic Integrations

iris-web

Collaborative Incident Response platform

rpcfirewall

Shuffle

Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.

strelka-ui

Strelka Web UI for File Submission and Analysis

velociraptor-docs

Documentation site for Velociraptor

WonkaVision

yamllint

A linter for YAML files.

yara-forge

Automated YARA Rule Standardization and Quality Assurance Tool

yara-forge-docker

Run YARA Forge in a Docker container

zeek-oui

Add an OUI lookup to Bro IDS.