Alternatives and similar repositories for honeybits

Users that are interested in honeybits are comparing it to the libraries listed below

• 0x4D31 / deception-as-detection
  Deception based detection techniques mapped to the MITRE’s ATT&CK framework
  ☆289Updated 7 years ago
• ciscocsirt / GOSINT
  The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs).
  ☆546Updated 2 years ago
• TKCERT / mail-security-tester
  A testing framework for mail security and filtering solutions.
  ☆244Updated last year
• SekoiaLab / Fastir_Collector_Linux
  ☆174Updated 4 years ago
• SupportIntelligence / Icewater
  16,432 Free Yara rules created by
  ☆384Updated 6 years ago
• Kirtar22 / Litmus_Test
  Detecting ATT&CK techniques & tactics for Linux
  ☆258Updated 4 years ago
• ChrisRimondi / VulntoES
  Vulnerability Data in ES
  ☆146Updated 7 years ago
• THIBER-ORG / userline
  Query and report user logons relations from MS Windows Security Events
  ☆243Updated 6 years ago
• DanMcInerney / msf-autoshell
  Feed the tool a .nessus file and it will automatically get you MSF shell
  ☆237Updated 2 years ago
• jymcheong / AutoTTP
  Automated Tactics Techniques & Procedures
  ☆255Updated 2 years ago
• Cyb3rWard0g / Invoke-ATTACKAPI
  A PowerShell script to interact with the MITRE ATT&CK Framework via its own API
  ☆369Updated 6 years ago
• botherder / kraken
  Cross-platform Yara scanner written in Go
  ☆328Updated 2 years ago
• GreyNoise-Intelligence / api.greynoise.io
  Code + documentation for the public GreyNoise API
  ☆315Updated 4 years ago
• honeynet / beeswarm
  Honeypot deployment made easy
  ☆236Updated 6 years ago
• codeexpress / respounder
  Respounder detects presence of responder in the network.
  ☆316Updated 6 years ago
• DefensePointSecurity / threat_note
  DPS' Lightweight Investigation Notebook
  ☆432Updated last year
• JustinAzoff / zeek-pdns
  Passive DNS collection using Zeek
  ☆182Updated 2 years ago
• Tripwire / TARDIS
  Threat Analysis, Reconnaissance, and Data Intelligence System
  ☆124Updated 9 years ago
• keithjjones / hostintel
  A modular Python application to collect intelligence for malicious hosts.
  ☆268Updated 4 years ago
• CERT-W / certitude
  The Seeker of IOC
  ☆129Updated 4 years ago
• hdm / inetdata
  Internet data acquisition
  ☆149Updated 4 years ago
• aplura / Tango
  Honeypot Intelligence with Splunk
  ☆254Updated 6 years ago
• lair-framework / lair
  Lair is a reactive attack collaboration framework and web application built with meteor.
  ☆383Updated 5 years ago
• rastrea2r / rastrea2r
  Collecting & Hunting for IOCs with gusto and style
  ☆240Updated 3 years ago
• tcstool / Fireaway
  Next Generation Firewall Audit and Bypass Tool
  ☆264Updated 8 years ago
• n0dec / MalwLess
  Test Blue Team detections without running any attack.
  ☆272Updated last year
• praetorian-inc / purple-team-attack-automation
  Praetorian's public release of our Metasploit automation of MITRE ATT&CK™ TTPs
  ☆722Updated 5 years ago
• Invoke-IR / ACE
  Automated, Collection, and Enrichment Platform
  ☆325Updated 5 years ago
• mkorman90 / VolatilityBot
  VolatilityBot – An automated memory analyzer for malware samples and memory dumps
  ☆264Updated 4 years ago
• francisck / DanderSpritz_lab
  A fully functional DanderSpritz lab in 2 commands
  ☆428Updated 6 years ago