Pinned Repositories
DinoSOARLab
Security Onion + Automation + Response Lab including n8n and Velociraptor
misp2elastalert
Convert MISP events to Elastalert rules
securityonion-limacharlie
Send logs from LimaCharlie to Security Onion
securityonion-misp
securityonion-sigma
securityonion-strelka
securityonion-velociraptor
Run Velociraptor on Security Onion
velociraptor-docker
Docker image for Velocidex Velociraptor
velociraptor-misp
Artifacts for integrating MISP with Velociraptor
velocistack
weslambert's Repositories
weslambert/securityonion-docker-airgap
weslambert/sguil-pivots
weslambert/bro-otx
Integrate Bro with Alienvault OTX
weslambert/fsf
File Scanning Framework
weslambert/PyMISP
Python library using the MISP Rest API
weslambert/securityonion-elastalert-rules
weslambert/securityonion-grr
weslambert/securityonion-misp-docker
weslambert/codie
weslambert/elastalert-docker
Docker image with Elastalert on Alpine Linux.
weslambert/FIR
Fast Incident Response
weslambert/flare
An analytical framework for network traffic and behavioral analytics
weslambert/infosec-problems
weslambert/laikaboss
Laika BOSS: Object Scanning System
weslambert/legendary-guacamole
weslambert/logstash
Logstash - transport and process your logs, events, or other data
weslambert/Logstash-1
Contains Logstash related content including tons of Logstash configurations
weslambert/OTX-Suricata
The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX account.
weslambert/securityonion-capme
weslambert/securityonion-curator-docker
Curator on CentOS for Security Onion
weslambert/securityonion-elastalert-docker
weslambert/securityonion-elsa-extras
weslambert/securityonion-etherpad
weslambert/securityonion-fir
weslambert/securityonion-hive
weslambert/securityonion-rule-update
weslambert/securityonion-squert
A Simple QUEry and Report Tool
weslambert/sysmon-config
Sysmon configuration file template with default high-quality event tracing
weslambert/TheHive
TheHive: a Scalable, Open Source and Free Security Incident Response Platform
weslambert/weslambert.github.io
Build a Jekyll blog in minutes, without touching the command line.