Josh Brower

osquery-filters. Go

Pertinax. Integrating Sysinternals Autoruns’ logs into Security Onion

WinTAP. Mirror network traffic from one interface to another on Windows

Sysmon_OSSEC. OSSEC Decoder & Rulesets for Sysmon Events

so-idh. Shell

Sysmon_ELSA_Parsers. ELSA Parsers for Sysmon Events

elastic-agent-event-filters. Project to convert Sysmon config filters to Elastic Agent - Defend Integration filters

Win-Process-Tracking_ELSA_Parsers. ELSA Parsers for Windows Process Tracking Events

fleet. Open-source platform for IT, security, and infrastructure teams. (Linux, macOS, Chrome, Windows, cloud, data center)

launcher-packager. One-shot container that generates customized [Launcher] osquery packages

LOLBAS. Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

ossec-hids. OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.