127 matches found
DetectionLabELK
DetectionLabELK DetectionLabELK is a fork from Chris Long's DetectionLab with ELK stack instead of Splunk. Description: DetectionLabELK is the perfect lab to use if you would like to build effective detection capabilities. It has been designed with defenders in mind. Its primary purpose is to all...
tsharkVM
💡 Actualización: tshark-opensearch La aplicación más reciente tshark-opensearch ya está disponible. Puede encontrarlo en el repositorio https://github.com/h21-lab/apps-collection-info. 👉 Obtener Acceso tshark ELK VM appliance Este proyecto construye una máquina virtual que puede usarse para...
DShield-SIEM
DShield Sensor Log Collection with Elasticsearch Introduction This is fork and a significant update from the initial publication on the ISC Storm Center website by Scott Jensen as a BACS paper and the scripts published in Github. https://github.com/fkadriver/Dshield-ELK...
evtx
EVTX A cross-platform parser for the Windows XML EventLog format Features 🔒 Implemented using 100% safe rust - and works on all platforms supported by rust that have stdlib. ⚡ Fast - see benchmarks below. It's faster than any other implementation by orders of magnitude! 🚀 Multi-threaded. ✨ Suppor...
whids
IMPORTANT: this README and other documentation is not updated to reflect the changes made to latest beta releases as a lot of changes happened. All this will be updated in time when a stable version will be released see Roadmap until next release. Feel free to run beta releases on your own and as...
atomic-red-team
Atomic Red Team Atomic Red Team™ is a library of tests mapped to the MITRE ATT&CK® framework. Security teams can use Atomic Red Team to quickly, portably, and reproducibly test their environments. Get started You can execute atomic tests directly from the command line, no installation required. S...
HELK
HELK El Hunting ELK o simplemente HELK es una de las primeras plataformas de caza de código abierto con capacidades avanzadas de análisis, como lenguaje declarativo SQL, gráficos, streaming estructurado e incluso aprendizaje automático a través de Jupyter notebooks y Apache Spark sobre una pila...
gaia
Gaia: Evaluador Global de Integridad de API Dependencias Instalar opam para compilar la API de pruebas. Instalar git, python3, pip y .NET para compilar RESTler y Schemathesis. Instalar cargo para compilar Gaia. Instalar docker v26.0.1 y docker compose v2.26.1 para compilar Gaia con ELK Stack...
LinuxCatScale
Linux-CatScale IR Collection Script Linux CatScale is a bash script that uses live of the land tools to collect extensive data from Linux based hosts. The data aims to help DFIR professionals triage and scope incidents. An Elk Stack instance also is configured to consume the output and assist the...
dsiem
Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...
dsiem
Dsiem Dsiem es un motor de correlación de eventos de seguridad para ELK stack, que permite que la plataforma se utilice como un sistema SIEM dedicado y completo. Dsiem proporciona correlación al estilo OSSIM para registros/eventos normalizados, realiza consultas a fuentes de inteligencia de...
Adama
Adama Búsquedas para caza de amenazas y analítica de seguridad Una colección de búsquedas conocidas de datos de registros y/o eventos para la caza de amenazas y detección. Enumeran conjuntos de búsquedas utilizadas en múltiples pipelines de datos. Los detalles de implementación son para ELK. Adam...
EUVD-2025-120007
Malicious code in western-amaranth-elk npm...
EUVD-2025-117320
Malicious code in honest-turquoise-elk npm...
Malicious code in honest-turquoise-elk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98b24c315bdaaaa70ffde94ffa47dd1cace75a29f6a70c897672941508a87bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cultural_elk_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7553762169673e5bf1da7b335ad3e1f55a610d0287a9cee54d521d4f703031ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in naval_elk_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 121aea9744217027ab909357183138b1fa54722169086774e9a890b34c0d9a10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in pure_elk_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971ced70ea830acef8a97f3b36073ba1c3c47358307028d6c98576919588ee5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...