Popular repositories Loading

1. ACE ACE Public archive

   Analysis Correlation Engine

   Python 23 8

2. yara_scanner yara_scanner Public

   A Python wrapper library for libyara and a local server for fully utilizing the CPUs of the system to scan with yara...with additional capabilities.

   Python 19 8

3. cbinterface2 cbinterface2 Public

   Library and command line tool for interacting with Carbon Black environments.

   Python 6 1

4. ioc_splunk_detect ioc_splunk_detect Public

   operationalize your indicators of compromise, and send alerts/matches to ACE

   Python 1 1

5. ioc_export ioc_export Public

   export indicators of compromise into yara format or csv (interfaces with crits and sip)

   Python 1

6. elk_hunter elk_hunter Public

   Forked from IntegralDefense/elk_hunter

   A daemon to execute ElasticSearch queries and create ACE alerts based on the results.

   Python 1