DevoInc / sightingdb
Sighting DB is designed to scale writing and reading a count of attributes, tracking when if was first and last seen
☆16Updated 11 months ago
Alternatives and similar repositories for sightingdb:
Users that are interested in sightingdb are comparing it to the libraries listed below
- This python scripts can calculate the WHOIS Similarity Distance between two given domains.☆30Updated 2 years ago
- Specifications used in the MISP project including MISP core format☆51Updated 2 months ago
- SACTI - Securely aggregate CTI sightings and report them on MISP☆13Updated 2 years ago
- Private Search Set (PSS) is an extension to standard Bloom filter or a standalone hash file to describe and share private set.☆16Updated 2 months ago
- ☆33Updated 4 years ago
- A Python implementation of the Community ID flow hashing standard☆23Updated last year
- SightingDB is a database for Sightings☆22Updated last year
- Pythonic way to work with the warning lists defined there: https://github.com/MISP/misp-warninglists☆32Updated last month
- command line tool to use the DNSDB Flexible Search API extensions.☆16Updated 7 months ago
- Pythonic way to work with the galaxies defined there: https://github.com/MISP/misp-galaxy☆19Updated 3 months ago
- This project contains code for comparing or ranking APT capabilities and operational capacity. The metrics are meant to quantify, rank, o…☆35Updated 6 years ago
- CyCAT.org API back-end server including crawlers☆30Updated 2 years ago
- ☆14Updated 6 years ago
- server for indexing and querying passive DNS observations☆45Updated last year
- Golang Library to interact with your MISP instance☆21Updated 5 years ago
- References for FIRST CTI 2019 Symposium presentation☆23Updated 5 years ago
- The CRATOS proxy API integrates with your MISP instance and allows to extract indicators that can be consumed by security components such…☆13Updated last month
- Complementary material to presentations at events☆9Updated last year
- ☆23Updated 4 years ago
- Zeek support for Community ID flow hashing.☆35Updated last year
- A collection of typical false positive indicators☆55Updated 4 years ago
- Connect your mail client/infrastructure to MISP in order to create events based on the information contained within mails.☆69Updated last year
- Bro IDS + ELK Stack to detect and block data exfiltration☆46Updated 6 years ago
- Splunk integration with MISP☆12Updated 6 years ago
- Zeek package to generate a SMB client fingerprint☆27Updated 4 years ago
- a-ray-grass is a yara module that provides support for DCSO-format bloom filters in yara. In the context of hashlookup, it allows quickly…☆14Updated 2 years ago
- ☆24Updated 2 years ago
- CyCAT.org taxonomies☆14Updated 3 years ago
- Analysis Correlation Engine☆26Updated 5 years ago
- Workbench: A scalable python framework for security research and development teams.☆91Updated 5 years ago