HELK

HELK हंटिंग ELK या सरल शब्दों में HELK, पहले ओपन सोर्स हंट प्लेटफॉर्मों में से एक है, जिसमें उन्नत विश्लेषण क्षमताएँ हैं जैसे SQL डिक्लेरेटिव भाषा, ग्राफिंग, स्ट्रक्चर्ड स्ट्रीमिंग, और यहाँ तक कि Jupyter नोटबुक और Apache Spark के माध्यम से ELK स्टैक पर मशीन लर्निंग भी। यह प्रोजेक्ट मुख्य रूप से श...

atomic-red-team

Atomic Red Team Atomic Red Team™ is a library of tests mapped to the MITRE ATT&CK® framework. Security teams can use Atomic Red Team to quickly, portably, and reproducibly test their environments. Get started You can execute atomic tests directly from the command line, no installation required. S...

DetectionLabELK

DetectionLabELK DetectionLabELK è un fork del DetectionLab di Chris Long con stack ELK al posto di Splunk. Descrizione: DetectionLabELK è il laboratorio perfetto da usare se vuoi sviluppare capacità di rilevamento efficaci. È stato progettato pensando ai difensori. Il suo scopo principale è...

LinuxCatScale

Script di Raccolta Linux-CatScale IR Linux CatScale è uno script bash che utilizza strumenti nativi del sistema per raccogliere dati estesi da host basati su Linux. I dati hanno lo scopo di aiutare i professionisti DFIR a fare triage e valutare la portata degli incidenti. È inoltre configurata...

Adama

Adama Suchanfragen für Threat Hunting und Security Analytics Eine Sammlung bekannter Suchanfragen für Log- und/oder Ereignisdaten zur Bedrohungssuche und Erkennung. Sie listen Suchsätze auf, die in vielen verschiedenen Datenpipelines verwendet werden. Implementierungsdetails beziehen sich auf ELK...

dsiem

Dsiem ديسيم هو محرك ارتباط أحداث أمنية لـ ELK stack، مما يسمح باستخدام المنصة كنظام SIEM مخصص ومتكامل الميزات. يوفر ديسيم ارتباطًا على غرار OSSIM للأحداث / السجلات الموحدة، ويقوم بإجراء بحث / استعلام عن مصادر معلومات الاستخبارات التهديدية ونقاط الضعف، وينتج إنذارات معدلة حسب المخاطر. الميزات يعمل...

DShield-SIEM

Raccolta log del sensore DShield con Elasticsearch Introduzione Questa è una fork e un aggiornamento significativo rispetto alla pubblicazione iniziale sul sito dell'ISC Storm Center di Scott Jensen come documento BACS e agli script pubblicati su Github. https://github.com/fkadriver/Dshield-ELK...

tsharkVM

💡 Aktualisierung: tshark-opensearch Eine neuere Anwendung tshark-opensearch ist jetzt verfügbar. Sie finden sie im Repository https://github.com/h21-lab/apps-collection-info. 👉 Zugriff erhalten tshark ELK VM Appliance Dieses Projekt erstellt eine virtuelle Maschine, die für die Analyse von tshark...

whids

IMPORTANT: this README and other documentation is not updated to reflect the changes made to latest beta releases as a lot of changes happened. All this will be updated in time when a stable version will be released see Roadmap until next release. Feel free to run beta releases on your own and as...

gaia

Gaia: Global API Integrity Assessor Dipendenze Installa opam per compilare le API di test. Installa git, python3, pip e .NET per compilare RESTler e Schemathesis. Installa cargo per compilare Gaia. Installa docker v26.0.1 e docker compose v2.26.1 per compilare Gaia con ELK Stack opzionale se non...

evtx

EVTX A cross-platform parser for the Windows XML EventLog format Features 🔒 Implemented using 100% safe rust - and works on all platforms supported by rust that have stdlib. ⚡ Fast - see benchmarks below. It's faster than any other implementation by orders of magnitude! 🚀 Multi-threaded. ✨ Suppor...

dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

EUVD-2025-120007

Malicious code in western-amaranth-elk npm...

EUVD-2025-117320

Malicious code in honest-turquoise-elk npm...

Malicious code in honest-turquoise-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98b24c315bdaaaa70ffde94ffa47dd1cace75a29f6a70c897672941508a87bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cultural_elk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7553762169673e5bf1da7b335ad3e1f55a610d0287a9cee54d521d4f703031ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-100166

Malicious code in culturalelkz3n npm...

EUVD-2025-103523

Malicious code in navalelkz3n npm...

Malicious code in naval_elk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 121aea9744217027ab909357183138b1fa54722169086774e9a890b34c0d9a10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pure_elk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971ced70ea830acef8a97f3b36073ba1c3c47358307028d6c98576919588ee5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...