amirzargaran
SOC the Next-Gen Architect & Open-Source SIEM and related tools implementor and deployer
SOC 724
amirzargaran's Stars
zeek/zeek
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
coditori/highly-skilled-job-offers
Sharing some info around job offers and interviews preparations
weslambert/DinoSOARLab
Security Onion + Automation + Response Lab including n8n and Velociraptor
LetMeR00t/TA-thehive-cortex
Technical add-on for Splunk related to TheHive/Cortex from TheHive project
amirzargaran/ArcSight-TheHive-Alert
And now, for the first time, you can send alerts via action from ArcSight ESM Console to the TheHive when Correlation Rules are triggered.
P1llus/ArcSight-Rest
Python library for the ArcSight logger REST API
jaijhala/ArcSight--Elastic
How to integrate ArcSight with Elastic
TheHive-Project/TheHive
TheHive: a Scalable, Open Source and Free Security Incident Response Platform
advanced-threat-research/Yara-Rules
Repository of YARA rules made by Trellix ATR Team
counteractive/incident-response-plan-template
A concise, directive, specific, flexible, and free incident response plan template
mitre-attack/bzar
A set of Zeek scripts to detect ATT&CK techniques.
TheHive-Project/awesome
A curated list of awesome things related to TheHive & Cortex
meirwah/awesome-incident-response
A curated list of tools for incident response
GACWR/OpenUBA
A robust, and flexible open source User & Entity Behavior Analytics (UEBA) framework used for Security Analytics. Developed with luv by Data Scientists & Security Analysts from the Cyber Security Industry. [PRE-ALPHA]