Deutsche Cyber-Sicherheitsorganisation

All

47 repositories

fever
Public
fast, extensible, versatile event router for Suricata's EVE-JSON format
golang security json monitoring bloom-filter eve suricata intrusion-detection netsec pdns
Go
•
Other
•8•51•2•0•Updated Jul 3, 2024Jul 3, 2024
mini-syslog-receiver
Public
Mini Syslog Receiver
Go
•
Other
•0•2•0•0•Updated Apr 22, 2024Apr 22, 2024
Blog_CyTec
Public
Repository to provide files related to our blog articles.
Python
•0•15•0•0•Updated Feb 21, 2024Feb 21, 2024
misp-taxonomies
Public
Taxonomies used in MISP taxonomy system and can be used by other information sharing tool.
Python
•
Other
•135•0•0•0•Updated Feb 7, 2024Feb 7, 2024
TIE-Splunk-TA
Public
DCSO Threat Intelligence Engine (TIE) Add-On for Splunk v8
splunk splunk-application splunk-addon technical-addon
Python
•
BSD 3-Clause "New" or "Revised" License
•2•3•5•2•Updated Jan 31, 2024Jan 31, 2024
balboa
Public
server for indexing and querying passive DNS observations
api graphql dns golang rocksdb security monitoring passive suricata hacktoberfest
C
•
Other
•7•44•11•1•Updated Jan 22, 2024Jan 22, 2024
fn_misp_dcso
Public archive
Python
•0•2•0•0•Updated Dec 15, 2023Dec 15, 2023
maapi
Public archive
Unofficial Mandiant Advantage API Client
Python
•
GNU General Public License v3.0
•1•0•0•0•Updated Nov 4, 2023Nov 4, 2023
tie-threatbus-bridge
Public archive
tool to feed IoCs from DCSO TIE to Threat Bus
Go
•
Other
•0•5•1•0•Updated Sep 22, 2023Sep 22, 2023
suricata
Public
Repository for Suricata contributions by DCSO
C
•
GNU General Public License v2.0
•1.5k•0•0•0•Updated Aug 31, 2023Aug 31, 2023
tiffy
Public
TIE Feed Generator for MISP (replaces tie2misp)
misp
Python
•
BSD 3-Clause "New" or "Revised" License
•2•5•0•2•Updated May 22, 2023May 22, 2023
MISP-dockerized-server
Public archive
docker dockerfile docker-image apache2 misp
Shell
•
BSD 3-Clause "New" or "Revised" License
•8•4•3•1•Updated May 22, 2023May 22, 2023
misp-warninglists
Public
Warning lists to inform users of MISP about potential false-positives or other information in indicators
Python
•173•0•0•0•Updated Apr 20, 2023Apr 20, 2023
sigma
Public archive
Generic Signature Format for SIEM Systems
Python
•
Other
•2.2k•0•0•0•Updated Jan 6, 2023Jan 6, 2023
suricata-rules
Public
Suricata Rules by DCSO
Other
•0•3•0•0•Updated Jan 3, 2023Jan 3, 2023
MISP
Public
MISP (core software) - Open Source Threat Intelligence and Sharing Platform (formely known as Malware Information Sharing Platform)
PHP
•
GNU Affero General Public License v3.0
•1.4k•0•0•0•Updated Jan 3, 2023Jan 3, 2023
dcso-portal-python-sdk
Public archive
DCSO Portal Python SDK
Python
•
MIT License
•4•1•2•0•Updated Oct 26, 2022Oct 26, 2022
bloom
Public
A highly efficient Bloom filter library and command line tool written in Go.
Go
•
Other
•14•72•1•1•Updated Sep 16, 2022Sep 16, 2022
dcso-portal-stackstorm
Public archive
DCSO Portal StackStorm Package
stackstorm
Python
•
MIT License
•3•1•1•0•Updated May 31, 2022May 31, 2022
misp-modules
Public
Modules for expansion services, import and export in MISP
Python
•
GNU Affero General Public License v3.0
•235•0•0•0•Updated Nov 24, 2021Nov 24, 2021
gotie
Public archive
Go bindings for the DCSO TIE
Go
•
Other
•1•2•0•0•Updated Jul 26, 2021Jul 26, 2021
suricata-verify
Public
Suricata Verification Tests - Testing Suricata Output
Python
•90•0•0•0•Updated Feb 28, 2021Feb 28, 2021
fluxline
Public
Golang library to prepare sets of metrics in InfluxDB's Line Protocol format
library monitoring diy lineprotocol golang influxdb metrics encoder
Go
•
Other
•4•5•0•0•Updated Sep 7, 2020Sep 7, 2020
TIE-Splunk-App
Public
Splunk App (Dashboard) for DCSO Threat Intelligence Engine (TIE)
Python
•
BSD 3-Clause "New" or "Revised" License
•0•2•11•0•Updated Jun 17, 2020Jun 17, 2020
MISP-dockerized
Public
docker docker-compose full-stack misp threat-intelligence-platform misp-docker-environment misp-docker
Shell
•
BSD 3-Clause "New" or "Revised" License
•11•33•7•0•Updated May 4, 2020May 4, 2020
MISP-dockerized-robot
Public archive
docker dockerfile ansible docker-compose docker-container
Shell
•
BSD 3-Clause "New" or "Revised" License
•0•0•0•0•Updated Apr 28, 2020Apr 28, 2020
bintag
Public
IDA Pro BinTag Plugin
C++
•
MIT License
•2•2•1•0•Updated Apr 20, 2020Apr 20, 2020
MISP-dockerized-misp-modules
Public archive
https://github.com/DCSO/MISP-dockerized
dockerfile docker-image misp-modules misp
Dockerfile
•
BSD 3-Clause "New" or "Revised" License
•3•0•2•0•Updated Mar 27, 2020Mar 27, 2020
flor
Public
A Python implementation of our efficient Bloom filter library.
Python
•
Other
•4•30•1•0•Updated Feb 27, 2020Feb 27, 2020
slinkwatch
Public
automatic enumeration and maintenance of Suricata monitoring interfaces
automation network suricata intrusion-detection network-monitoring interfaces sensor-management ifplugd
Go
•
GNU General Public License v2.0
•5•11•6•1•Updated Dec 10, 2019Dec 10, 2019