Palantir osquery Configuration Logo

Palantir osquery Configuration

0
Free
Visit Website

This repository provides a baseline template for organizations deploying osquery in a production environment, including query packs tailored to specific environments such as unwanted-chrome-extensions and windows-attacks, emphasizing careful consideration of datasets and use-cases for optimal osquery operation.

FEATURES

ALTERNATIVES

A collection of AWS security architectures for various security operations.

PowerGRR is a PowerShell module for the GRR API, allowing automation and scripting for incident response and remote live forensics.

A GraphQL security testing tool

A report on detecting lateral movement through tracking event logs, updated to include analysis of various tools and commands used by attackers.

AWS Community repository of custom Config rules with instructions for leveraging and developing AWS Config Rules.

A collection of incident response methodologies for various security incidents, providing easy-to-use operational best practices.

Scumblr is a web application for periodic syncs of data sources and security analysis to streamline proactive security.

An AI-powered security operations platform that automates alert investigation, triage, and response workflows for SOC analysts.