sentinelone-star-queries

KO | EN

gitlite — search

#python #hacktoberfest #go #android #machine-learning #linux #docker #macos #java #awesome #cli #kubernetes #awesome-list #security

sentinelone-star-queries

(★ 10)

Collection of SentinelOne STAR Queries for Hunting and Creating Custom Rules

sentinelone-star-queries 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# sentinelone-star-queries

Collection of SentinelOne STAR Queries for Hunting and Creating Custom Rules

## What are STAR Queries?

STAR (Storyline Active Response) Rules are part of the Feature "Deep Visibility" of the SentinelOne EDR Product.

They represent customizable rules to detect and either kill or alarm if matching processes are started or configurations are applied on endpoints.

- [More about the feature](https://assets.sentinelone.com/storyline-active-response) - SentinelOne Product Sheet
- [How-To for creating STAR Rules in the Product](https://www.sentinelone.com/blog/customize-your-edr-to-adapt-to-your-environment-with-sentinelone-storyline-active-response-star/) - SentinelOne Blog
- [S1QL Cheatsheet for Security Analysis](https://assets.sentinelone.com/c/sentinel-one-dv-chea?x=u6040P) - SentinelOne Blog

## Other Repositories regarding STAR Queries

There are already other repositories that collect SentinelOne STAR Rules like:

- [Sentinel-One-STAR-Rules-Threat-Hunts](https://github.com/acquiredsecurity/Sentinel-One-STAR-Rules-Threat-Hunts) - Detecting different specific or general malicious activities
- [Sentinelone-Queries](https://github.com/keyboardcrunch/sentinelone-queries) - Queries with Mapping to Mire Att@ck TTPs
- [SentinelOne-Query-Navigator](https://github.com/keyboardcrunch/SentinelOne-Query-Navigator) - A Python Flask based web application for loading the SentinelOne-Queries repository into a browseable database

## This Repository

This repository here contains Queries, that I found or created myself based on different sources.

the first attempt is to put them in to different md-Files based on something like "categories".

Maybe this will change over time.

sentinelone-star-queries

sentinelone-star-queries 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

sentinelone-star-queries

sentinelone-star-queries 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README