Alternatives and similar repositories for HASH

Users that are interested in HASH are comparing it to the libraries listed below

• elastic / SWAT
  ☆164Updated this week
• anvilogic-forge / armory
  Anvilogic Forge
  ☆107Updated 2 weeks ago
• vectra-ai-research / derf
  DeRF (Detection Replay Framework) is an "Attacks As A Service" framework, allowing the emulation of offensive techniques and generation o…
  ☆102Updated last year
• grahamhelton / IMDSpoof
  IMDSPOOF is a cyber deception tool that spoofs the AWS IMDS service to return HoneyTokens that can be alerted on.
  ☆104Updated last year
• infosecB / Rulehound
  An index of publicly available and open-source threat detection rulesets.
  ☆122Updated 4 months ago
• boostsecurityio / lotp
  boostsecurityio/lotp
  ☆133Updated 5 months ago
• jatrost / awesome-detection-rules
  This is a collection of threat detection rules / rules engines that I have come across.
  ☆296Updated last year
• unknownhad / CloudIntel
  This repo contains IOC, malware and malware analysis associated with Public cloud
  ☆249Updated 10 months ago
• jshlbrd / detection-engineering-pocket-guide
  pocket guide for core detection engineering concepts
  ☆30Updated 2 years ago
• facebookincubator / ForgeArmory
  ForgeArmory provides TTPs that can be used with the TTPForge (https://github.com/facebookincubator/ttpforge).
  ☆117Updated 11 months ago
• iknowjason / edge
  Recon tool for cloud provider attribution. Supports AWS, Azure, Google, Cloudflare, and Digital Ocean.
  ☆172Updated 10 months ago
• huntresslabs / rogueapps
  When good OAuth apps go rogue. Documents observed OAuth application tradecraft
  ☆77Updated last week
• referefref / aiocrioc
  An LLM and OCR based Indicator of Compromise Extraction Tool
  ☆35Updated 9 months ago
• Yamato-Security / suzaku
  Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.
  ☆147Updated this week
• TactiKoolSec / OTHF
  Open Threat Hunting Framework
  ☆118Updated 2 years ago
• korniko98 / pivot-atlas
  ☆94Updated last month
• cado-security / varc
  Volatile Artifact Collector collects a snapshot of volatile data from a system. It tells you what is happening on a system, and is of par…
  ☆256Updated 9 months ago
• krdmnbrk / AttackRuleMap
  Mapping of open-source detection rules and atomic tests.
  ☆176Updated 7 months ago
• JPCERTCC / MemoryForensic-on-Cloud
  Memory Forensic System on Cloud
  ☆91Updated last year
• hdm / ctail
  Tail Certificate Transparency logs and extract hostnames
  ☆124Updated 2 months ago
• northsh / detection.studio
  Convert Sigma rules to SIEM queries, directly in your browser.
  ☆94Updated this week
• WithSecureLabs / detectree
  Data visualization for blue teams
  ☆126Updated 2 years ago
• markkcc / crxaminer
  Examine Chrome extensions for security issues
  ☆85Updated last month
• fkie-cad / bountyhunter
  A Caldera plugin for the emulation of complete, realistic cyberattack chains.
  ☆56Updated 2 weeks ago
• UncoderIO / Roota
  Roota is a public-domain language of threat detection and response that combines native queries from a SIEM, EDR, XDR, or Data Lake with …
  ☆128Updated last year
• BushidoUK / Breach-Report-Collection
  A collection of companies that disclose adversary TTPs after they have been breached
  ☆245Updated last year
• referefref / honeydet
  Signature based honeypot detector tool written in Golang
  ☆103Updated 5 months ago
• adanalvarez / HoneyTrail
  Independently deploy customized honeyservices in AWS to trigger alerts on unauthorized access. It utilizes a dedicated CloudTrail for pre…
  ☆51Updated 9 months ago
• cisagov / kev-data
  Mirror of cisa.gov/kev data files
  ☆55Updated last week
• wiz-sec-public / wiz-research-iocs
  ☆44Updated last month