Palantir osquery Configuration Logo

Palantir osquery Configuration

0
Free
Visit Website

This repository provides a baseline template for organizations deploying osquery in a production environment, including query packs tailored to specific environments such as unwanted-chrome-extensions and windows-attacks, emphasizing careful consideration of datasets and use-cases for optimal osquery operation.

FEATURES

ALTERNATIVES

Cortex XSOAR is a comprehensive SOAR platform that automates and standardizes security processes for faster response times and increased team productivity.

A framework for accumulating, describing, and classifying actionable Incident Response techniques

Request Tracker for Incident Response (RTIR) is a tool for incident response teams to manage incident reports, correlate data, and facilitate communication.

A robust and flexible hunt and incident response tool for investigating AzureAD, Azure, and M365 environments.

Incident Response Documentation tool for tracking findings and tasks.

npm security team foils plot to steal $13 million in cryptocurrency

A report on detecting lateral movement through tracking event logs, updated to include analysis of various tools and commands used by attackers.

A PHP based web application for managing postmortems with pluggable features.