elastic-peak-dashboards

Paneles de análisis de Threat Hunt de referencia PEAK Kibana / Security Onion 3.0 — Análisis de protocolos Tier 1 e ICS Paneles de análisis de objetos guardados de Kibana importables que implementan la metodología de Threat Hunt de referencia PEAK de Splunk para operaciones de caza de amenazas...

Malcolm

Malcolm Malcolm 是一套强大的网络流量分析工具套件，其设计目标如下： 易于使用 – Malcolm 接受全流量数据包捕获（PCAP）文件、Zeek 日志和 Suricata 告警等形式的数据。这些内容可通过简单的浏览器界面上传，或使用轻量级转发器进行被动实时捕获并转发至 Malcolm。无论采用哪种方式，数据都会被自动归一化、丰富化并关联以进行分析。 强大的流量分析能力 – 通过两个直观界面提供网络通信可见性：OpenSearch Dashboards（一个灵活的数据可视化插件，内置数十个预建仪表板，可概览网络协议）和...

CorelightForSentinelOne

Paneles de SentinelOne para Singularity Operations Center Descripción general Esta guía le ayudará a configurar y utilizar los paneles de SentinelOne, que ofrecen potentes perspectivas de datos para monitorear y analizar el tráfico de su red. Ya sea que sea un analista de seguridad, administrador...

ThreatHunting

ThreatHunting | 一个映射到MITRE ATT&CK的Splunk应用，指导威胁狩猎 这是一个Splunk应用程序，包含多个仪表板和超过130份报告，将帮助您调查初始狩猎指标。 您显然需要将Sysmon数据导入Splunk，好的配置可以在此处找到 注意： 此应用程序并非万能药，它需要调优和真正的调查工作才能在您的环境中真正有效。 尝试与您的系统管理员成为最好的朋友。他们将能够解释许多最初发现的指标。 非常感谢MITRE创建了ATT&CK框架！ 我们非常欢迎拉取请求/问题票证和新添内容！ Mitre ATT&CK 我致力于将所有搜索映射到ATT&CK框架。...

Genzai

Genzai IoT 安全工具包 描述 • 特性 • 安装与使用 • 致谢 • 联系我 描述 Genzai 帮助您识别单个或一组输入目标上的物联网（IoT）相关仪表板，并进一步扫描它们以发现默认密码问题以及基于路径和版本的潜在漏洞。 例如，一个可通过互联网访问的家居自动化设备管理面板。该工具首先根据 signatures.json 中的一组签名对 IoT 产品进行指纹识别，然后根据识别出的产品及其数据库（vendor-logins.json 和 vendor-vulns.json）中的相关模板，扫描是否存在类似 admin:admin 的厂商特定默认密码，并检查潜在的漏洞。 Genzai...

CLEANSTART-2026-PE45361 Security fix for ghsa-ppp5-5v6c-4jwp applied in: jitsucom-jitsu 2.11.0-r3, kibana 9.3.2-r3, opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

ghsa-ppp5-5v6c-4jwp affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OG82185 Security fix for CVE-2026-35213 applied in: opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

CVE-2026-35213 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IW47152 Security fix for ghsa-w9j2-pvgh-6h63 applied in: opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

ghsa-w9j2-pvgh-6h63 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

VulnWhisperer

从您的漏洞扫描中创建可操作的数据 VulnWhisperer 是一个漏洞管理工具和报告聚合器。VulnWhisperer 将从不同的漏洞扫描器中拉取所有报告，并为每个报告创建一个具有唯一文件名的文件，随后将这些数据用于同步到 Jira 并馈送到 Logstash。Jira 会利用扫描器提供的数据执行完整的闭环同步，而 Logstash 则对报告内的所有信息进行索引和标记（请参见 /resources/elk6/pipeline/ 下的 logstash 文件）。数据随后被传输到 ElasticSearch 进行索引，最终在 Kibana 中以可视化且可搜索的格式呈现，并带有预定义的仪表板...

dns-honeypot

我运行DNS蜜罐的头24小时 作为一名大部分时间都埋头于可观测性工具的工程师，偶尔会有一些我必须去实践的想法。这就是其中一次实验：在一个干净的IP上启动一个DNS解析器，该IP未被任何人宣传，然后让互联网随意与之通信。这个解析器唯一的任务就是保持安静、记录一切，并将结果查询输入Grafana。执行一次docker compose up...

CVE-2026-84367 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-6W3J-5FW6-R9VR vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2026-84368 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-GG4H-3HG2-GRPC vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2026-67321 vulnerabilities

Vulnerabilities for packages: prism, nextcloud-server, lerna, opensearch-dashboards, langfuse, kubeflow-centraldashboard, jitsucom-jitsu...

GHSA-3MCP-22MF-VRW3 vulnerabilities

Vulnerabilities for packages: prism, nextcloud-server, lerna, opensearch-dashboards, langfuse, kubeflow-centraldashboard, jitsucom-jitsu...

CVE-2026-84942

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

CVE-2026-84942

This stored cross-site scripting (XSS) vulnerability affects OpenSearch Dashboards . The root cause is a flaw in the checkForFunctionProperty validation routine within the Vega expression function, which failed to recurse into arrays of objects, allowing a function property nested inside an array...

CVE-2026-84942 Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

EUVD-2026-74074

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...