hasecuritysolutions Goto Github PK

elastic-ilm

Alternative Index Lifecycle Management decoupled from Elastic with more granularity

elastic_stack

flare

An analytical framework for network traffic and behavioral analytics

logcampaign

Provides detection capabilities and log conversion to evtx or syslog capabilities

logstash

Contains Logstash related content including tons of Logstash configurations

pcapprocessor

This repo provides a sample PowerShell script to process folders of PCAPs against zeek and suricata for SIEM analysis

presentations

scripts

sid_translation

Converts Snort GPL and ET rules into csv format for Logstash Translation

smarthomesecurityintegrations

sysmon-manager

This repo contains information on how to auto deploy Sysmon via GPO and Task Scheduler

tacticaldatahandlingatscalewithlogstash

Contains log samples and configuration files for the Tactical Data Handling at Scale with Logstash course

tld_pattern_calculator

update-vms

Snapshot, patch, health-check, and potentially roll-back Windows VMs

vector

A high-performance observability data pipeline.

vulnwhisperer

Create actionable data from your Vulnerability Scans

vulnwhisperer-tests

weccomputergroupmgmt

youtubecontent

zeek_to_cuckoo

Contains a python script and service file for sending Zeek extracted files to Cuckoo Sandbox