Alternatives and similar repositories for schemas

Users that are interested in schemas are comparing it to the libraries listed below

• STIXProject / openioc-to-stix
  Generate STIX XML from OpenIOC XML
  ☆92Updated 7 years ago
• threatminer / ioc_parser
  Tool to extract indicators of compromise from security reports in PDF format
  ☆35Updated 9 years ago
• STIXProject / schemas
  STIX Schema Development
  ☆76Updated 7 years ago
• stucco / data
  Collection of data sources that can be used to provide context to security events
  ☆25Updated 10 years ago
• kx499-zz / ostip
  ☆28Updated 8 years ago
• TAXIIProject / yeti
  YETI is a TAXII implementation
  ☆46Updated 6 years ago
• QTek / QRadio
  QRadio ~ Best Threat Intelligence Radio ~ Tune In!
  ☆96Updated 9 years ago
• zeek / zeek-osquery
  Bro/Zeek integration with osquery
  ☆94Updated 4 years ago
• stephenbrannon / IOCextractor
  IOC (Indicator of Compromise) Extractor: a program to help extract IOCs from text files.
  ☆132Updated 9 years ago
• silascutler / MalPipe
  Malware/IOC ingestion and processing engine
  ☆107Updated 6 years ago
• LiamRandall / BroMalware-Exercise
  ☆85Updated 12 years ago
• crits / crits_services
  CRITs Services Collection
  ☆184Updated 4 years ago
• S03D4-164 / Hiryu
  IOC Management and Visualization Tool
  ☆47Updated 2 years ago
• aboutsecurity / Bro-samples
  Network Forensics Bro scripts & pcap samples
  ☆63Updated 11 years ago
• MISP / misp-objects
  Definition, description and relationship types of MISP objects
  ☆101Updated last month
• cmu-sei / cyobstract
  A tool to extract structured cyber information from incident reports.
  ☆82Updated 7 years ago
• sethhall / bro-apt1
  This is a script module for Bro that encapsulates and detects activity related to the Mandiant APT1 report.
  ☆49Updated 11 years ago
• PUNCH-Cyber / stoq-plugins-public
  stoQ Public Plugins
  ☆71Updated 2 years ago
• adulau / MalwareClassifier
  Malware Classifier From Network Captures
  ☆82Updated 8 years ago
• abusesa / abusehelper
  A framework for receiving and redistributing abuse feeds
  ☆124Updated 6 years ago
• xme / misp-docker
  Docker container for MISP
  ☆96Updated 7 years ago
• oasis-open / cti-documentation
  OASIS TC Open Repository: GitHub Pages site for STIX and TAXII
  ☆104Updated 2 weeks ago
• CybOXProject / python-cybox
  A Python library for parsing, manipulating, and generating CybOX content.
  ☆79Updated 5 years ago
• sooshie / secrepo
  Sweet, sweet, secrepo.com html.
  ☆132Updated 4 years ago
• oasis-tcs / openc2-usecases
  OASIS OpenC2 TC: Repository for submitting and reviewing OpenC2 use cases relevant to the work of the OpenC2 Language Subcommittee (LSC)
  ☆28Updated 3 years ago
• syphon1c / Threatelligence
  Threatelligence is a simple cyber threat intelligence feed collector, using Elasticsearch, Kibana and Python to automatically collect int…
  ☆148Updated 11 years ago
• Soinull / assimilate
  Assimilate is a series of scripts for using the Naïve Bayes algorithm to find potential malicious activity in HTTP headers
  ☆91Updated 8 years ago
• gcrahay / otx_misp
  Imports Alienvault OTX pulses to a MISP instance
  ☆53Updated 4 years ago
• eclecticiq / cabby
  TAXII client implementation from EclecticIQ
  ☆103Updated 4 years ago
• LiamRandall / bro-scripts
  Bro scripts to be shared with the community
  ☆111Updated 12 years ago