
fastnetmon
Very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support

Very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support

Detect Tactics, Techniques & Combat Threats

Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders

PCRE RegEx matching Log4Shell CVE-2021-44228 IOC in your logs

Apache Real Time Logs Analyzer System

An open standard for hashing network flows into identifiers, a.k.a "Community IDs".

Detection Script for MongoBleed Exploitation

Zeek package for tracking long connections to report them before they have completed.

Mapping Corelight or Zeek data to Elastic Common Schema logs

This is a repo for fetching Applocker event log by parsing the win-event log


Script to check for IOC's created by ProxyNotShell (CVE-2022-41040 & CVE-2022-41082)

Automated forensic script hunting for cve-2019-19781

Run on your ManageEngine server

