SysmonTools
SplunkDashboards
Our great sponsors
| SysmonTools | SplunkDashboards | |
|---|---|---|
| 2 | 1 | |
| 1,445 | 49 | |
| - | - | |
| 3.5 | 0.0 | |
| 7 months ago | over 3 years ago | |
| - | - |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
SysmonTools
SplunkDashboards
-
Looking for Splunk dashboards
I've been trying to find some dashboards for threathunting and ive only managed to find these 2 sources: https://github.com/Truvis/SplunkDashboards and https://gosplunk.com/category/splunk-dashboards/ i was wondering if anyone knew of some other good places for threat hunting dashes?
What are some alternatives?
sysmon-config - Sysmon configuration file template with default high-quality event tracing
MISP - MISP (core software) - Open Source Threat Intelligence and Sharing Platform
sysmon-modular - A repository of sysmon configuration modules
Spring4Shell-Detection - Lazy SPL to detect Spring4Shell exploitation
sysmon-config - Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events.
slack-alerts - Splunk custom alert action for sending messages to Slack channels
SysmonForLinux
QSimpleScada - Qt based simple SCADA framework, with dashboard, static and dynamic components
SysmonConfigPusher - Pushes Sysmon Configs
how-to-setup-a-honeypot - How to setup a honeypot with an IDS, ELK and TLS traffic inspection
TA-UserWatchlist - User Watchlist App for Splunk