Repositories list

• velociraptor-to-timesketch

  Public
  Shell

  •

  MIT License

  •1•2•3•0•Updated Oct 24, 2024Oct 24, 2024

• recon-sublime-cli

  Public
  A command-line tool and module for the free Sublime Analysis API

  Python

  •

  MIT License

  •5•0•0•0•Updated Oct 16, 2024Oct 16, 2024

• python-limacharlie

  Public
  Python API for the LimaCharlie.io service.

  Python

  •

  Apache License 2.0

  •13•0•0•0•Updated Oct 16, 2024Oct 16, 2024

• transfer.sh

  Public archive
  Easy and fast file sharing from the command-line.

  Go

  •

  MIT License

  •1.5k•1•0•0•Updated Nov 1, 2023Nov 1, 2023

• usp-adapters

  Public
  LimaCharlie Universal Sensor Protocol (USP) Adapters to ingest from various sources.

  Go

  •

  Apache License 2.0

  •2•1•0•0•Updated May 18, 2023May 18, 2023

• web-traffic-generator

  Public
  A quick and dirty HTTP/S "organic" traffic generator.

  Python

  •

  MIT License

  •169•484•6•1•Updated Apr 6, 2023Apr 6, 2023

• project-website

  Public
  The source to opensearch.org

  SCSS

  •

  BSD 3-Clause "New" or "Revised" License

  •484•0•0•0•Updated Mar 21, 2023Mar 21, 2023

• cylance-logs

  Public
  Flask application that integrates with Cylance Protect API and logs the events.

  pythonapiflask+ 1cylance

  Python

  •0•0•0•0•Updated Mar 16, 2023Mar 16, 2023

• lce_doc

  Public
  Documentation for LimaCharlie Enterprise

  Shell

  •8•0•0•0•Updated Sep 27, 2022Sep 27, 2022

• adversary-emulation-map

  Public
  Creates an ATT&CK Navigator map of an Adversary Emulation Plan

  Python

  •5•16•0•1•Updated Sep 4, 2021Sep 4, 2021

• ansible-graylog-modules

  Public
  Ansible modules for the Graylog API

  pythonansiblegraylog

  Python

  •

  GNU General Public License v3.0

  •26•61•1•1•Updated Jul 14, 2021Jul 14, 2021

• rhq

  Public
  Recon Hunt Queries

  incident-responsedfirthreat-hunting+ 2osquerymitre-attack

  10•76•0•3•Updated May 16, 2021May 16, 2021

• png-decrypt

  Public
  Python

  •0•1•0•0•Updated May 4, 2021May 4, 2021

• sigma-to-elastalert

  Public
  Ansible playbook to convert Sigma rules to ElastAlert rules

  Shell

  •1•9•0•0•Updated Feb 5, 2021Feb 5, 2021

• canaries2thehive

  Public
  Create alerts in The Hive from your Thinkst Canary alerts, to be turned into Hive cases.

  flaskcanarypython3+ 2thehive4pythehive-project

  Python

  •1•8•0•0•Updated Sep 11, 2020Sep 11, 2020

• graylog2thehive

  Public
  Create alerts in The Hive from your Graylog alerts, to be turned into Hive cases.

  pythonflaskgraylog+ 2graylog-serverthehive-project

  Python

  •9•44•4•1•Updated Aug 17, 2020Aug 17, 2020

• canarytools

  Public
  Subset of Thinkst Canary API for Go

  Go

  •1•0•0•0•Updated Jul 8, 2020Jul 8, 2020

• geo-ip-visualization

  Public
  Visualize Geographic IP address information using Python

  MIT License

  •0•1•0•0•Updated Apr 24, 2020Apr 24, 2020

• Cortex-Analyzers

  Public
  Cortex Analyzers Repository

  Python

  •

  GNU Affero General Public License v3.0

  •378•0•0•0•Updated Mar 18, 2020Mar 18, 2020

• KapeFiles

  Public
  This repository serves as a place for community created Targets and Modules for use with KAPE.

  MIT License

  •196•0•0•0•Updated Mar 9, 2020Mar 9, 2020

• ansible-greynoise

  Public
  Ansible modules for the GreyNoise API

  Python

  •

  GNU General Public License v3.0

  •0•8•0•0•Updated Feb 24, 2020Feb 24, 2020

• ansible-okta-modules

  Public
  Ansible modules for the Okta API

  pythonansibleokta

  Python

  •

  GNU General Public License v3.0

  •13•27•0•3•Updated Jan 16, 2020Jan 16, 2020

• CyPyAPI

  Public
  Python3 Wrapper for the Cylance API v10

  Python

  •

  GNU General Public License v3.0

  •1•0•0•0•Updated Dec 19, 2019Dec 19, 2019

• mailgun2thehive

  Public
  Simple Python flask app that runs as a web server, and accepts POST requests from your Mailgun routes.

  pythonhivemailgun+ 1thehive-project

  Python

  •2•3•0•0•Updated Jun 4, 2019Jun 4, 2019

• ansible-nginx-gen

  Public
  Generates TCP/UDP stream configuration files for NGINX based on the backend servers and ports provided

  nginxansiblegraylog+ 2ansible-rolenginx-proxy

  1•10•0•0•Updated May 23, 2019May 23, 2019

• slack-c2bot

  Public
  Slack C2bot that executes commands and returns the output.

  Go

  •15•0•0•0•Updated Apr 18, 2019Apr 18, 2019

• query-packs

  Public
  Ansible role for importing query packs into Kolide (https://kolide.com)

  Python

  •0•6•0•0•Updated Jan 16, 2019Jan 16, 2019

• ansible-moloch

  Public
  Deploys all-in-one Elasticsearch & Moloch

  ansibleelasticsearchmoloch

  Shell

  •1•8•0•0•Updated Jan 4, 2019Jan 4, 2019

• ansible-canarytokens

  Public
  Ansible role to deploy canarytokens with Docker

  dockeransiblecanarytokens

  0•2•0•0•Updated Dec 14, 2018Dec 14, 2018

• ansible-timesketch-all

  Public
  Timesketch all-in-one

  Ruby

  •0•4•0•0•Updated Nov 12, 2018Nov 12, 2018