elastic-peak-dashboards

PEAK Baseline Threat Hunt Dashboards Kibana / Security Onion 3.0 — Tier 1 & ICS Protocol Analysis Importable Kibana saved-object dashboards implementing the Splunk PEAK Baseline Threat Hunt methodology for cyber threat hunt CTH and incident response IR operations. Built and validated against...

CorelightForSentinelOne

Singularity Operations Center 向け SentinelOne ダッシュボード 概要 このガイドでは、ネットワークトラフィックの監視と分析のための強力なデータインサイトを提供する SentinelOne ダッシュボードのセットアップと活用方法を説明します。セキュリティアナリスト、ネットワーク管理者、IT プロフェッショナルのいずれであっても、これらのダッシュボードを使用すると、ネットワークのセキュリティ状態を簡単に可視化して追跡できます。 インストールと設定 パーサー設定 Marketplace からのパーサーのインストール -- TBD -- GitHub...

ThreatHunting

ThreatHunting | A Splunk app mapped to MITRE ATT&CK to guide your threat hunts This is a Splunk application containing several dashboards and over 130 reports that will facilitate initial hunting indicators to investigate. You obviously need to be ingesting Sysmon data into Splunk, a good...

Genzai

Genzai The IoT Security Toolkit Description • Features • Setup & Usage • Acknowledgements • Contact Me Description Genzai helps you identify IoT or Internet of Things related dashboards across a single or set of targets provided as an input and furthermore scan them for default password issues an...

Malcolm

Malcolm Malcolm は、以下の目標を念頭に設計された強力なネットワークトラフィック解析ツールスイートです。 使いやすさ – Malcolm は、フルパケットキャプチャ PCAP ファイル、Zeek ログ、Suricata アラートの形でネットワークトラフィックデータを受け入れます。これらのアーティファクトは、シンプルなブラウザベースのインターフェースを介してアップロードするか、軽量フォワーダを使用して受動的にキャプチャして Malcolm に転送できます。いずれの場合も、データは自動的に正規化、エンリッチメント、および相関が行われ、分析に利用できるようになります。...

CLEANSTART-2026-PE45361 Security fix for ghsa-ppp5-5v6c-4jwp applied in: jitsucom-jitsu 2.11.0-r3, kibana 9.3.2-r3, opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

ghsa-ppp5-5v6c-4jwp affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OG82185 Security fix for CVE-2026-35213 applied in: opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

CVE-2026-35213 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IW47152 Security fix for ghsa-w9j2-pvgh-6h63 applied in: opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

ghsa-w9j2-pvgh-6h63 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

VulnWhisperer

Createactionable data from your vulnerability scans VulnWhisperer is a vulnerability management tool and report aggregator. VulnWhisperer will pull all the reports from the different Vulnerability scanners and create a file with a unique filename for each one, using that data later to sync with...

dns-honeypot

My First 24 Hours Running a DNS Honeypot As an engineer who spends most of my days knee-deep in observability tooling, I get the occasional idea that I just have to run with. This was one of those experiments: spin up a DNS resolver on a clean IP that nobody advertises, then let the internet talk...

CVE-2026-84367 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-GG4H-3HG2-GRPC vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-6W3J-5FW6-R9VR vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2026-84368 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2026-67321 vulnerabilities

Vulnerabilities for packages: nextcloud-server, jitsucom-jitsu, kubeflow-centraldashboard, langfuse, prism, lerna, opensearch-dashboards...

GHSA-3MCP-22MF-VRW3 vulnerabilities

Vulnerabilities for packages: nextcloud-server, jitsucom-jitsu, kubeflow-centraldashboard, langfuse, prism, lerna, opensearch-dashboards...

CVE-2026-84942

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

CVE-2026-84942 Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

CVE-2026-84942

This stored cross-site scripting (XSS) vulnerability affects OpenSearch Dashboards . The root cause is a flaw in the checkForFunctionProperty validation routine within the Vega expression function, which failed to recurse into arrays of objects, allowing a function property nested inside an array...

EUVD-2026-74074

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...