MrM8BRH/Falcon-NextGen-SIEM

GitHub: MrM8BRH/Falcon-NextGen-SIEM

为 CrowdStrike Falcon 新一代 SIEM 提供部署指南、检测规则、解析器和集成模板的实战资源合集。

Stars: 2 | Forks: 1

اللَّهُمَّ صَلِّ علَى مُحَمَّدٍ وعلَى آلِ مُحَمَّدٍ، كما صَلَّيْتَ علَى إبْرَاهِيمَ وعلَى آلِ إبْرَاهِيمَ؛ إنَّكَ حَمِيدٌ مَجِيدٌ.

اللَّهُمَّ بَارِكْ علَى مُحَمَّدٍ وعلَى آلِ مُحَمَّدٍ، كما بَارَكْتَ علَى إبْرَاهِيمَ وعلَى آلِ إبْرَاهِيمَ؛ إنَّكَ حَمِيدٌ مَجِيدٌ.

- NextGen SIEM 部署 - 🗒️ [部署](https://github.com/MrM8BRH/Falcon-NextGen-SIEM/blob/main/NextGen%20SIEM%20Deployment/Deployment.md) - 🗒️ [Falcon 日志收集器](https://github.com/MrM8BRH/Falcon-NextGen-SIEM/blob/main/NextGen%20SIEM%20Deployment/Falcon%20Log%20Collector.md) - 🗒️ [关联规则](https://github.com/MrM8BRH/Falcon-NextGen-SIEM/blob/main/NextGen%20SIEM%20Deployment/Correlation%20rules.md) - 🗒️ [CQL](https://github.com/MrM8BRH/Falcon-NextGen-SIEM/blob/main/NextGen%20SIEM%20Deployment/CQL.md) - 🗒️ [Cribl](https://github.com/MrM8BRH/Falcon-NextGen-SIEM/blob/main/NextGen%20SIEM%20Deployment/Cribl.md) - 📁 [YAML](https://github.com/MrM8BRH/Falcon-NextGen-SIEM/tree/main/NextGen%20SIEM%20Deployment/YAML) - 📁 [解析器](https://github.com/MrM8BRH/Falcon-NextGen-SIEM/tree/main/NextGen%20SIEM%20Deployment/Parsers) - 📁 [官方文档](https://github.com/MrM8BRH/Falcon-NextGen-SIEM/tree/main/NextGen%20SIEM%20Deployment/Official%20Documentations)


image image
标签：AMSI绕过, CrowdStrike, SIEM, 威胁检测, 安全规则, 安全运营, 安全部署指南, 扫描框架, 日志分析