BechtelCIRT / beholderLinks
Beholder is a shell script which installs and configures essentials to peer into your network activity.
☆19Updated 8 years ago
Alternatives and similar repositories for beholder
Users that are interested in beholder are comparing it to the libraries listed below
Sorting:
- Harbinger Threat Intelligence☆82Updated 9 years ago
- Docker container for MISP☆96Updated 7 years ago
- Some IR notes☆73Updated 9 years ago
- Script for generating Bro intel files from pdf or html reports☆77Updated 9 years ago
- Just another tool to extract Indicator of compromise (ioc) from files☆29Updated 10 years ago
- a Malware/Threat Analyst Desktop☆89Updated 10 years ago
- ☆64Updated 3 years ago
- ☆72Updated 3 years ago
- Compare multiple log formats against malware reputation lists.☆88Updated 8 years ago
- Cyber Analytics Platform and Examination System (CAPES) Project Page☆60Updated 6 years ago
- ☆24Updated 9 years ago
- threat language parser☆60Updated 10 years ago
- Log Examination Tool☆27Updated 9 years ago
- Bro-IDS scripts☆50Updated 9 years ago
- ☆17Updated 7 years ago
- (Unofficial) Python API for https://malwr.com/☆62Updated 9 years ago
- Network Forensics Bro scripts & pcap samples☆63Updated 11 years ago
- Basic Anomaly IDS capabilities with Python and Bro☆105Updated 7 years ago
- Threat Intelligence distribution☆30Updated 9 years ago
- Collecting & Hunting for IOCs with gusto and style☆116Updated 7 years ago
- Cyber Defence Monitoring Course Suite :: Suricata, Bro, Moloch☆61Updated 8 years ago
- **BETA** A simple buildscript for network security monitoring on RHEL/CentOS☆31Updated 8 years ago
- Manage VT Alerts☆62Updated 9 years ago
- Scripts for Bro IDS and ELK Stack☆57Updated 10 years ago
- Python script to pull various IOCs from PDFs☆15Updated 10 years ago
- Assorted classes and methods for indexing reports and retrieving information from an elastic index☆21Updated 9 years ago
- Unification of dnstwist + SQLite + Email reporting. Set it as a cron job that runs every hour, give it a list of domains and email addres…☆67Updated 7 years ago
- A set of Maltego transforms for VirusTotal Public API v2.0. This set has the added functionality of caching queries on a daily basis to s…☆83Updated 9 years ago
- Enrich a host with open source security information☆27Updated 10 years ago
- This is a script module for Bro that encapsulates and detects activity related to the Mandiant APT1 report.☆49Updated 11 years ago