Security Onion RITA-J Notebook

This project is for finding a solution to use Security Onion Elastic data with Jupyter Notebooks.

Credit to Cyb3r Monk for bringing RITA to Jupyter Notebooks.

https://github.com/Cyb3r-Monk/RITA-J/blob/main/C2%20Detection%20-%20HTTP.ipynb

So far I am able to pull back data from Security Onion using the elastic API. Please see Security-Onion Notebooks above for more detial. If you would like to add to this project please feel free to do so. Enjoy!

Name		Name	Last commit message	Last commit date
Latest commit History 51 Commits
Graph Suricata and Zeek using Security Onion 2 and NetworkX.ipynb		Graph Suricata and Zeek using Security Onion 2 and NetworkX.ipynb
Graph-Binary-Net-Connections-With-RITA-Analysis.ipynb		Graph-Binary-Net-Connections-With-RITA-Analysis.ipynb
README.md		README.md
Security-Onion-Beacon-Detection-Bare-IPs.ipynb		Security-Onion-Beacon-Detection-Bare-IPs.ipynb
Security-Onion-RITA-J-Domain-Name-Beacon-Hunter.ipynb		Security-Onion-RITA-J-Domain-Name-Beacon-Hunter.ipynb

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Graph Suricata and Zeek using Security Onion 2 and NetworkX.ipynb

Graph Suricata and Zeek using Security Onion 2 and NetworkX.ipynb

Graph-Binary-Net-Connections-With-RITA-Analysis.ipynb

Graph-Binary-Net-Connections-With-RITA-Analysis.ipynb

README.md

README.md

Security-Onion-Beacon-Detection-Bare-IPs.ipynb

Security-Onion-Beacon-Detection-Bare-IPs.ipynb

Security-Onion-RITA-J-Domain-Name-Beacon-Hunter.ipynb

Security-Onion-RITA-J-Domain-Name-Beacon-Hunter.ipynb

Repository files navigation

Security Onion RITA-J Notebook

About

Releases

Packages

Languages

ColeVan/SOV2-RITA-J

Folders and files

Latest commit

History

Repository files navigation

Security Onion RITA-J Notebook

About

Resources

Stars

Watchers

Forks

Languages