Alternatives and similar repositories for SecuritySnacks

Users that are interested in SecuritySnacks are comparing it to the libraries listed below

• k3idii / ION
  Indicators of Normality
  ☆11Updated 2 years ago
• nasbench / Awesome-Detection-Engineering
  Resources and Discussions About Detection Engineering
  ☆12Updated 2 years ago
• bradleyjkemp / sigma-esf
  Run Sigma detection rules on logs from the new MacOS EndpointSecurity Framework
  ☆20Updated 4 years ago
• Permiso-io-tools / DetentionDodger
  ☆16Updated 5 months ago
• antman1p / PrintTCCdb
  JXA script for Mythic that prints the TCC.db
  ☆15Updated 4 years ago
• ReconInfoSec / adversary-emulation-map
  Creates an ATT&CK Navigator map of an Adversary Emulation Plan
  ☆17Updated 3 years ago
• randomaccess3 / block-parser
  Parser for Windows PowerShell script block logs
  ☆13Updated 6 months ago
• Velocidex / cloudvelo
  An experimental Velociraptor implementation using cloud infrastructure
  ☆25Updated 3 weeks ago
• ninoseki / ioc-extractor
  An npm package for extracting common IoC (Indicator of Compromise) from a block of text
  ☆58Updated 5 months ago
• stairwell-inc / threat-research
  Repository of tools, YARA rules, and code-snippets from Stairwell's research team.
  ☆22Updated last year
• threatexpress / threat-mitigation
  Threat Mitigation Strategies
  ☆25Updated 2 years ago
• nettitude / PoshC2_IOCs
  A list of IOCs applicable to PoshC2
  ☆24Updated 4 years ago
• StrangerealIntel / DeltaFlare
  ☆12Updated 4 years ago
• ruppde / yara_rules
  Yara rules
  ☆22Updated 2 years ago
• elastic / sans-dfir-2022
  Repo with supporting material for the talk titled "Cracking the Beacon: Automating the extraction of implant configurations"
  ☆11Updated 5 months ago
• NoDataFound / RiskIQ.SunBurst.Hunter
  The Purpose of this research tool is to provide a Python client into RiskIQ API services.
  ☆22Updated 4 years ago
• NextronSystems / nextron-helper-scripts
  Public tools, scripts or code snippets that can help when working with our products
  ☆46Updated 2 months ago
• cocaman / yara-scan-service
  Repository for scripts and tips for "Yara Scan Service"
  ☆20Updated 2 years ago
• imp0rtp3 / yara-rules
  Yara rules written by me, for free use.
  ☆19Updated 3 years ago
• alwashmi / MasterParser
  MasterParser is a simple, all-in-one, digital forensics artifact parser
  ☆23Updated 4 years ago
• ZephrFish / PotUtils
  ☆16Updated 2 months ago
• CD-R0M / YARA
  Hundred Days of Yara Challenge
  ☆12Updated 3 years ago
• yasser-alghamdi / winterfell-hunt
  Winterfell hunt is a python script to perform auto threat hunting for malicious activities in windows OS based on collected data by winte…
  ☆15Updated 4 years ago
• MHaggis / ShellSweep
  ShellSweeping the evil.
  ☆53Updated last year
• chihebchebbi / Azure-Sentinel-Hive-Playbook
  Send High & New Incidents to The Hive incident management Platform
  ☆18Updated 4 years ago
• mandiant / ARDvark
  ARDvark parses the Apple Remote Desktop (ARD) files to pull out application usage, user activity, and filesystem listings.
  ☆35Updated 2 years ago
• davidprefer / Brugglemark
  PowerShell script that abuses browser bookmark synchronization as a mechanism for sending and receiving data between systems.
  ☆16Updated 2 years ago
• mattnotmax / hash_hunter
  Command-line tool to search for malware samples in various repositories
  ☆11Updated 3 years ago
• g-les / macho_similarity
  Conceptual Methods for Finding Commonalities in Macho Files
  ☆12Updated last year
• fastlorenzo / redelk-kibana-app
  Kibana app for RedELK
  ☆17Updated 2 years ago