Alternatives and similar repositories for bro

Users that are interested in bro are comparing it to the libraries listed below

• pun1sh3r / iocminion
  Just another tool to extract Indicator of compromise (ioc) from files
  ☆29Updated 9 years ago
• thnyheim / misp2bro
  Python script that gets IOC from MISP and converts it into BRO intel files.
  ☆13Updated 9 years ago
• paulpc / nyx
  Threat Intelligence distribution
  ☆30Updated 9 years ago
• sooshie / scrape_pdf
  Python script to pull various IOCs from PDFs
  ☆15Updated 10 years ago
• exp0se / harbinger
  Harbinger Threat Intelligence
  ☆82Updated 9 years ago
• opensourcesec / malstrom
  Cyber Intel Management
  ☆49Updated 7 years ago
• exp0se / bro-intel-generator
  Script for generating Bro intel files from pdf or html reports
  ☆77Updated 9 years ago
• jshlbrd / laikaboss-modules
  ☆17Updated 7 years ago
• crits / mcrits
  CRITs IOC Visualization in Maltego
  ☆28Updated 10 years ago
• thirdeyeintelligence / ThreatHunting
  An informational repo about hunting for adversaries in your IT environment.
  ☆14Updated 8 years ago
• TravisFSmith / MyBroElk
  Scripts for Bro IDS and ELK Stack
  ☆57Updated 9 years ago
• defensivedepth / Sysmon_OSSEC
  OSSEC Decoder & Rulesets for Sysmon Events
  ☆15Updated 10 years ago
• brad-anton / brand_watch
  Use OpenDNS's investigate API to find newly observed domains which match a brand or string
  ☆17Updated 9 years ago
• brianwarehime / otx_transforms
  Transforms for the AlienVault OTX service
  ☆39Updated 8 years ago
• pstirparo / yara_rules
  Yara rules I've written
  ☆10Updated 9 years ago
• gcrahay / otx_misp
  Imports Alienvault OTX pulses to a MISP instance
  ☆53Updated 3 years ago
• malware-kitten / bro_scripts
  A collection of bro_scripts and signatures
  ☆27Updated 6 years ago
• aboutsecurity / Bro-samples
  Network Forensics Bro scripts & pcap samples
  ☆63Updated 11 years ago
• hardwaterhacker / CrazyParser
  Parse URLCrazy and dnstwist output and compare against previous runs to identify new typosquatted domains.
  ☆52Updated 9 years ago
• mixmodeai / bro_intel_linter
  Bro Intel Feed Linter
  ☆26Updated 5 years ago
• jaegeral / FireMISP
  FireEye Alert json files to MISP Malware information sharing plattform (Alpha)
  ☆32Updated 8 years ago
• maurermj08 / efetch
  Evidence Fetcher (efetch) is a web-based file explorer, viewer, and analyzer.
  ☆38Updated 5 years ago
• hempnall / broyara
  integrating bro into yara
  ☆33Updated 10 years ago
• hadojae / DATA
  Credential Phish Analysis and Automation
  ☆97Updated 7 years ago
• PidgeyL / MISP-Extractor
  Extract information from MISP via the API
  ☆15Updated 9 years ago
• ciscocsirt / netsarlacc
  ☆38Updated 7 years ago
• xme / cuckoomx
  CuckooMX is a project to automate analysis of files transmitted over SMTP (using the Cuckoo sandbox)
  ☆41Updated 13 years ago
• initconf / brocon-15
  brocon-15 scripts
  ☆13Updated 8 years ago
• sroberts / threat-intel-templates
  A set of templates for documenting threat intelligence
  ☆75Updated 12 years ago
• MISP / misp-graph
  A tool to convert MISP XML files (events and attributes) into graphs
  ☆20Updated 8 years ago