Alternatives and similar repositories for slinkwatch:

Users that are interested in slinkwatch are comparing it to the libraries listed below

• SekoiaLab / FastIR_Server
  The FastIR Server is a Web server to schedule FastIR Collector forensics collect thanks to the FastIR Agent
  ☆12Updated 7 years ago
• beave / meer
  Meer (GPLv2) is a dedicated "spooler" for the Suricata & Sagan EVE output formats.
  ☆23Updated 4 years ago
• satta / gommunityid
  Go implementation of the Community ID flow hashing standard
  ☆20Updated last month
• woanware / bgp-watcher
  Prototype system to monitor BGP routes and alert when anomalies are identified
  ☆14Updated 6 years ago
• adulau / pdns-qof-server
  Passive DNS server interface compliant to "Common Output Format"
  ☆10Updated 8 years ago
• SekoiaLab / FastIR_Agent
  FastIR Agent is a Windows service to execute FastIR Collector on demand
  ☆14Updated 7 years ago
• bez0r / BeaconBits
  Network timing evaluation used to detect beacons, works with argus flow as the source
  ☆20Updated 8 years ago
• StamusNetworks / surimisp
  Check IOC provided by a MISP instance on Suricata events
  ☆17Updated 5 years ago
• t2mune / nield
  A tool to generate log messages related to interfaces, neighbor cache (ARP,NDP), IP address, routing, FIB rules, traffic control.
  ☆32Updated 4 months ago
• D4-project / d4-core
  D4 core software (server and sample sensor client)
  ☆42Updated last year
• Benster900 / BlogProjects
  Various blog post projects.
  ☆10Updated 7 months ago
• EmergingThreats / IDSDeathBlossom
  IDS Utility Belt For Automating/Testing Various Things
  ☆30Updated 4 years ago
• wolfvan / YaraRET
  Carving tool based in Radare2 & Yara
  ☆16Updated 6 years ago
• corelight / top-dns
  Top DNS Measurement for Bro
  ☆11Updated 4 years ago
• Security-Onion-Solutions / securityonion-docker-hh
  ☆20Updated 4 years ago
• jheise / yarascanner
  Golang based web service to scan files with yara rules
  ☆27Updated 7 years ago
• socprime / SigmaRulesIntegration
  ☆15Updated 6 years ago
• zeek / zeek-agent-framework
  This project is no longer maintained. There's a successor at https://github.com/zeek-packages/zeek-agent-v2
  ☆14Updated 4 years ago
• corelight / zeek-quic
  Bro analyzer that detects Google's QUIC protocol
  ☆10Updated 3 years ago
• staaldraad / fastfluxanalysis
  Scripts to detect Fast-Flux and DGA using DNS query responses
  ☆42Updated 7 years ago
• OISF / suricata-trafficid
  Application and service identification rules for Suricata
  ☆18Updated 2 years ago
• BreakingMalwareResearch / YetiToElastic
  YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack
  ☆16Updated 4 years ago
• CIRCL / IP-ASN-history
  IP-ASN-history is a server software to store efficiently the history of BGP announces and quickly lookup IP addresses origins
  ☆45Updated 2 years ago
• ukncsc / stix-cvebuilder
  CVE Builder script that generates STIX formatted Exploit Target objects
  ☆18Updated 8 years ago
• ncsa / bro-simple-scan
  ☆15Updated 10 months ago
• hrbrmstr / go-hhhash
  #️⃣ 🕸️ 👤 HTTP Headers Hashing
  ☆14Updated last year
• Hestat / intel-sharing
  Repository of Information sharing on threats and indicators
  ☆12Updated 4 years ago
• blazeinfosec / Flame
  Flame - Send vulnerabilities reports to SIEM
  ☆15Updated 8 years ago
• gamelinux / activedns
  An active domain name query tool to help keep track of domain name movements...
  ☆15Updated 3 years ago
• uppusaikiran / generic-parser
  A Single Library Parser to extract meta information,static analysis and detect macros within the files.
  ☆1Updated 6 years ago