stoq

快速开始 文档 安装 插件仓库 插件文档 概述 stoQ 是一个自动化框架，旨在简化分析师需要执行的繁琐且重复的任务。它使分析师和 DevSecOps 团队能够借助丰富且一致的数据结构，在不同数据源、数据库、解码器/编码器以及众多其他任务之间快速切换。stoQ 的设计目标是既具备企业级就绪性和可扩展性，同时又足够精简，适合个人安全研究人员使用。 为什么使用 stoQ？ 极其轻量级，设计以简洁为核心。 完整支持 AsyncIO。 提供广泛的公开可用插件。 stoQ 不对你的工作流做任何假设。分析师决定一切，从数据来源、扫描/解码/处理方式，到数据存储位置。...

S1EM - This Project Is A SIEM With SIRP And Threat Intel, All In One

Today, cyber attacks are more numerous and cause damage in companies. Nevertheless, many software products exist to detect cyber threats. The S1EM solution is based on the principle of bringing together the best products in their field, free of charge, and making them quickly interoperable. S1EM ...

stoQ - An Open Source Framework For Enterprise Level Automated Analysis

stoQ is a automation framework that helps to simplify the more mundane and repetitive tasks an analyst is required to do. It allows analysts and DevSecOps teams the ability to quickly transition from different data sources, databases, decoders/encoders, and numerous other tasks. stoQ was designed...