Alternatives and similar repositories for beholder

Users that are interested in beholder are comparing it to the libraries listed below

• exp0se / harbinger
  Harbinger Threat Intelligence
  ☆82Updated 9 years ago
• exp0se / bro-intel-generator
  Script for generating Bro intel files from pdf or html reports
  ☆77Updated 9 years ago
• xme / misp-docker
  Docker container for MISP
  ☆96Updated 7 years ago
• jipegit / IRNotes
  Some IR notes
  ☆73Updated 9 years ago
• jonschipp / mal-dnssearch
  Compare multiple log formats against malware reputation lists.
  ☆88Updated 8 years ago
• salesforce / threatshell
  ☆64Updated 3 years ago
• pun1sh3r / iocminion
  Just another tool to extract Indicator of compromise (ioc) from files
  ☆29Updated 9 years ago
• capesstack / capes
  Cyber Analytics Platform and Examination System (CAPES) Project Page
  ☆60Updated 5 years ago
• hashtagcyber / bropy
  Basic Anomaly IDS capabilities with Python and Bro
  ☆105Updated 7 years ago
• PaulSec / API-malwr.com
  (Unofficial) Python API for https://malwr.com/
  ☆62Updated 8 years ago
• maltelligence / maltelligence
  a Malware/Threat Analyst Desktop
  ☆89Updated 9 years ago
• sooshie / scrape_pdf
  Python script to pull various IOCs from PDFs
  ☆15Updated 10 years ago
• criticalstack / bro-scripts
  ☆71Updated 3 years ago
• TravisFSmith / MyBroElk
  Scripts for Bro IDS and ELK Stack
  ☆57Updated 9 years ago
• ministryofpromise / tlp
  threat language parser
  ☆60Updated 10 years ago
• ciscocsirt / netsarlacc
  ☆38Updated 6 years ago
• paulpc / nyx
  Threat Intelligence distribution
  ☆30Updated 9 years ago
• aboutsecurity / Bro-samples
  Network Forensics Bro scripts & pcap samples
  ☆62Updated 11 years ago
• cudeso / host-enrich
  Enrich a host with open source security information
  ☆27Updated 9 years ago
• boolaz / BooLet
  Log Examination Tool
  ☆26Updated 8 years ago
• CIRCL / cuckoo-modified
  Modified edition of cuckoo
  ☆18Updated 7 years ago
• xme / mime2vt
  Unpack MIME attachments from a file and check them against virustotal.com
  ☆44Updated 9 years ago
• sethhall / bro-apt1
  This is a script module for Bro that encapsulates and detects activity related to the Mandiant APT1 report.
  ☆48Updated 11 years ago
• hillar / CDMCS
  Cyber Defence Monitoring Course Suite :: Suricata, Bro, Moloch
  ☆61Updated 8 years ago
• jeffbryner / pyioc
  Python tools for IOC (Indicator of Compromise) handling
  ☆96Updated 3 years ago
• fox-it / bro-scripts
  Bro-IDS scripts
  ☆50Updated 8 years ago
• hadojae / redonion
  **BETA** A simple buildscript for network security monitoring on RHEL/CentOS
  ☆31Updated 8 years ago
• giangm9 / CrawlerAndValidator
  ☆24Updated 9 years ago
• Tripwire / TARDIS
  Threat Analysis, Reconnaissance, and Data Intelligence System
  ☆125Updated 9 years ago
• brianwarehime / otx_transforms
  Transforms for the AlienVault OTX service
  ☆39Updated 8 years ago