127 matches found
gaia
Gaia: Global API Integrity Assessor Dipendenze Installa opam per compilare le API di test. Installa git, python3, pip e .NET per compilare RESTler e Schemathesis. Installa cargo per compilare Gaia. Installa docker v26.0.1 e docker compose v2.26.1 per compilare Gaia con ELK Stack opzionale se non...
HELK
HELK The Hunting ELK o semplicemente HELK è una delle prime piattaforme di caccia open source con capacità di analisi avanzate come il linguaggio dichiarativo SQL, la creazione di grafici, lo streaming strutturato e persino l'apprendimento automatico tramite Jupyter notebook e Apache Spark su uno...
tsharkVM
💡 अद्यतन: tshark-opensearch अब नया एप्लिकेशन tshark-opensearch उपलब्ध है। आप इसे https://github.com/h21-lab/apps-collection-info रिपॉजिटरी में पा सकते हैं। 👉 पहुंच प्राप्त करें tshark ELK VM उपकरण यह प्रोजेक्ट एक वर्चुअल मशीन बनाता है जिसका उपयोग tshark -T ek ndjson आउटपुट के विश्लेषण के लिए किया...
Adama
Adama Suchanfragen für Threat Hunting und Security Analytics Eine Sammlung bekannter Suchanfragen für Log- und/oder Ereignisdaten zur Bedrohungssuche und Erkennung. Sie listen Suchsätze auf, die in vielen verschiedenen Datenpipelines verwendet werden. Implementierungsdetails beziehen sich auf ELK...
LinuxCatScale
Linux-CatScale Script de Coleta IR Linux CatScale é um script bash que utiliza ferramentas nativas do sistema live off the land para coletar dados extensivos de hosts baseados em Linux. Os dados visam ajudar profissionais de DFIR a triar e dimensionar incidentes. Uma instância do Elk Stack também...
DetectionLabELK
DetectionLabELK DetectionLabELK هو فرع من DetectionLab الخاص بـ Chris Long مع مجموعة ELK بدلاً من Splunk. الوصف: DetectionLabELK هو المختبر المثالي للاستخدام إذا كنت ترغب في بناء قدرات كشف فعالة. لقد تم تصميمه مع وضع المدافعين في الاعتبار. غرضه الأساسي هو السماح للفرق الزرقاء ببناء نطاق Windows...
dsiem
Dsiem Dsiem ist eine Korrelations-Engine für Sicherheitsereignisse für den ELK-Stack und ermöglicht es, die Plattform als dediziertes und voll ausgestattetes SIEM-System zu nutzen. Dsiem bietet eine OSSIM-artige Korrelation für normalisierte Logs/Ereignisse, führt Lookups/Query an Quellen für...
atomic-red-team
Atomic Red Team Atomic Red Team™ is a library of tests mapped to the MITRE ATT&CK® framework. Security teams can use Atomic Red Team to quickly, portably, and reproducibly test their environments. Get started You can execute atomic tests directly from the command line, no installation required. S...
whids
IMPORTANT: this README and other documentation is not updated to reflect the changes made to latest beta releases as a lot of changes happened. All this will be updated in time when a stable version will be released see Roadmap until next release. Feel free to run beta releases on your own and as...
evtx
EVTX A cross-platform parser for the Windows XML EventLog format Features 🔒 Implemented using 100% safe rust - and works on all platforms supported by rust that have stdlib. ⚡ Fast - see benchmarks below. It's faster than any other implementation by orders of magnitude! 🚀 Multi-threaded. ✨ Suppor...
dsiem
Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...
EUVD-2025-120007
Malicious code in western-amaranth-elk npm...
EUVD-2025-117320
Malicious code in honest-turquoise-elk npm...
Malicious code in honest-turquoise-elk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98b24c315bdaaaa70ffde94ffa47dd1cace75a29f6a70c897672941508a87bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cultural_elk_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7553762169673e5bf1da7b335ad3e1f55a610d0287a9cee54d521d4f703031ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-100166
Malicious code in culturalelkz3n npm...
Malicious code in naval_elk_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 121aea9744217027ab909357183138b1fa54722169086774e9a890b34c0d9a10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in pure_elk_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971ced70ea830acef8a97f3b36073ba1c3c47358307028d6c98576919588ee5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...