command line tool for interfacing with multiple carbonblack environments to perform analysis and live response functions

Library that interacts with SIP to build an indicator whitelist system.

Tool to fetch and log O365 Management Activity API logs in a SIEM-friendly json format.

Windows C# Gui Implementation of the Carbon Black Response feature set.

A suite of tools that parses intel from phish, sandbox reports, and other artifacts to create analyst-friendly wiki writeups.

Analysis Correlation Engine

python library for removal of emails

Simple Intel Platform

command line interface for adding indicators and querying different aspects of SIP