DShield-ISC / dshieldLinks
DShield Raspberry Pi Sensor
☆472Updated 3 weeks ago
Alternatives and similar repositories for dshield
Users that are interested in dshield are comparing it to the libraries listed below
Sorting:
- CLI tool to manage a SIFT Install☆420Updated 2 years ago
- CyLR - Live Response Collection Tool☆680Updated 3 years ago
- Main MineMeld documentation repo☆379Updated 7 years ago
- Passive service locator, a python sniffer that identifies servers, clients, names and much more☆252Updated 2 years ago
- This is a repository for freq.py and freq_server.py☆208Updated 4 years ago
- Documentation of TheHive☆397Updated last year
- SIFT☆508Updated last year
- Zeek Log Cheatsheets☆292Updated 2 years ago
- Simple Bash IOC Scanner☆736Updated 3 years ago
- Automated deployment scripts for the RockNSM network hunting distribution.☆454Updated last year
- Beacon Kibana Executable Report. Aggregates Sysmon Network Events With Elasticsearch and Kibana☆297Updated 8 months ago
- Python library using the MISP Rest API☆465Updated 3 weeks ago
- Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux☆499Updated 2 years ago
- Tools, techniques, cheat sheets, and other resources to assist those defending organizations and detecting adversaries☆451Updated 3 years ago
- User guide of MISP☆268Updated 5 months ago
- Incident Response Hierarchy of Needs☆462Updated 2 years ago
- ☆216Updated last year
- MISP Docker (XME edition)☆282Updated last year
- ☆200Updated 3 years ago
- A threat hunting / data analysis environment based on Python, Pandas, PySpark and Jupyter Notebook.☆246Updated 3 years ago
- Evolving directions on building the best Open Source Forensics VM☆160Updated 6 years ago
- Configuration files for the SOF-ELK VM☆1,593Updated this week
- Zeek-Formatted Threat Intelligence Feeds☆367Updated this week
- A set of Zeek scripts to detect ATT&CK techniques.☆593Updated 11 months ago
- Mark Baggett's (@MarkBaggett - GSE #15, SANS SEC573 Author) tool for detecting randomness using NLP techniques rather than pure entropy c…☆128Updated 2 years ago
- Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…☆408Updated last week
- Useful network monitoring, analysis, and active response tools used or mentioned in the SANS SEC503 course (https://www.sans.org/course/i…☆229Updated 5 months ago
- ☆88Updated last week
- A cross-platform baselining, threat hunting, and attack surface analysis tool for security teams.☆216Updated 2 months ago
- Documentation of Cortex☆174Updated last year