mabidm-tsinghua Goto Github PK

ecs

Elastic Common Schema

edr-telemetry

This project aims to compare and evaluate the telemetry of various EDR products.

elastalert

Easy & Flexible Alerting With ElasticSearch

elastic_stack

evtx-to-mitre-attack

Set of EVTX samples (>270) mapped to MITRE Att@k tactic and techniques to measure your SIEM coverage or developed new use cases.

flare-vm

fleet

Fleet is the lightweight, programmable telemetry platform for servers and workstations. Get comprehensive, customizable data from all your devices and operating systems — without the downtime risk.

fleet-1

A flexible control server for osquery fleets

helk

The Hunting ELK

isic

IP Stack Integrity Checker

jea

Just Enough Administration

launcher

Osquery launcher, autoupdater, and packager

lazagne

Credentials recovery project

lme

Logging Made Easy

logstash

Contains Logstash related content including tons of Logstash configurations

loic

Low Orbit Ion Cannon - An open source network stress tool, written in C#. Based on Praetox's LOIC project. USE ON YOUR OWN RISK. WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES.

malware-analysis-writeups

Some of my Malware Analysis writeups.

multithreaded-exfil-detection

A simple way of detecting multithreaded exfiltration in Zeek.

ntopng

Web-based Traffic and Security Network Traffic Monitoring

nxlog-autoconfig

oop

optimal-feature-configuration-for-dynamic-malware-classification-code

osq-ext-bin

Extension to osquery windows that enhances it with real-time telemetry, log monitoring and other endpoint data collection

osq-ext-bin-1

Extension to OSquery Windows that enhances it with real-time telemetry, log monitoring and other endpoint data collection

osquery

SQL powered operating system instrumentation, monitoring, and analytics.

osquery-attck

Mapping the MITRE ATT&CK Matrix with Osquery

osquery-extension

An osquery extension for endpoint engineers

osquery-extensions

osquery extensions by Trail of Bits

osquery-filters

ossem

Open Source Security Events Metadata (OSSEM)