Repositories list

• SentinelLogstash

  Public
  A collection of pre-configured containers for Sentinel log ingest using logstash

  Dockerfile

  •0•1•0•0•Updated Dec 16, 2024Dec 16, 2024

• N4Sysmon

  Public
  Node4 customised sysmon config

  Shell

  •1•0•0•0•Updated Dec 12, 2024Dec 12, 2024

• fortilogcsv

  Public
  Converts Fortigate log exports into CSV

  networkinglogsfortigate+ 1fortinet

  Python

  •

  MIT License

  •14•43•6•1•Updated Apr 17, 2024Apr 17, 2024

• n4ShadowServer

  Public
  Parser for shadowserver data

  Python

  •0•0•0•0•Updated Oct 17, 2023Oct 17, 2023

• auditd

  Public
  0•0•0•0•Updated Sep 14, 2023Sep 14, 2023

• Azure-Sentinel

  Public
  (Node4 version) Cloud-native SIEM for intelligent security analytics for your entire enterprise.

  Jupyter Notebook

  •

  MIT License

  •3k•0•0•0•Updated Jul 10, 2023Jul 10, 2023

• demo-scripts

  Public
  Some scripts for triggering SIEM detections in demo environment

  PowerShell

  •0•0•0•0•Updated Mar 9, 2023Mar 9, 2023

• SentinelLogicMonitor

  Public
  Sentinel integration for Logic Monitor Audit Logs

  Python

  •1•0•0•0•Updated Aug 30, 2022Aug 30, 2022

• ThreatIntelContainer

  Public
  Python

  •0•0•0•0•Updated Nov 25, 2021Nov 25, 2021

• c2-addresses

  Public
  0•0•0•0•Updated Aug 31, 2021Aug 31, 2021

• n4flood

  Public
  Flood monitoring API for PRTG

  Python

  •0•0•0•0•Updated Jan 27, 2021Jan 27, 2021

• O365-ThreatHunting

  Public
  Powershell scripts for identifying compromised Office 365 accounts/mailboxes

  auditthreat-huntingoffice365+ 1compromise

  PowerShell

  •2•9•0•1•Updated Dec 10, 2020Dec 10, 2020

• pyNessus

  Public
  API proxy for Nessus professional to allow aggregated reporting across scans

  Python

  •0•0•0•0•Updated Jul 14, 2020Jul 14, 2020