Alternatives and similar repositories for iocs

Users that are interested in iocs are comparing it to the libraries listed below

• rapid7 / Rapid7-Labs
  Rapid7 Labs operates as the division of Rapid7 focused on threat research. It is renowned for providing comprehensive threat intelligence…
  ☆75Updated last month
• stuxnet999 / volatility-binaries
  Contains compiled binaries of Volatility
  ☆37Updated 8 months ago
• svch0stz / velociraptor-detections
  ☆22Updated 2 years ago
• NextronSystems / evtx-baseline
  A repository hosting example goodware evtx logs containing sample software installation and basic user interaction
  ☆85Updated last month
• Beercow / DFIR_Toolbar
  ☆28Updated 3 months ago
• Hexastrike / EventWhisper
  A Windows Event Log MCP
  ☆38Updated 5 months ago
• MHaggis / ShellSweep
  ShellSweeping the evil.
  ☆53Updated last year
• openrelik / openrelik-deploy
  Tools and scripts to deploy and manage OpenRelik instances
  ☆16Updated 7 months ago
• embee-research / Yara-detection-rules
  Yara Rules for Modern Malware
  ☆78Updated last year
• muchdogesec / obstracts
  Turn any blog into structured threat intelligence.
  ☆49Updated this week
• alwashali / detection-validation
  Detection rule validation
  ☆40Updated 2 years ago
• SecurityAura / Aura-Research
  Repo that hold write-ups of various research projects I did and/or overall InfoSec things I investigated/researched.
  ☆21Updated last year
• eSentire / iocs
  ☆53Updated last week
• randomaccess3 / detections
  ☆46Updated last week
• ANSSI-FR / orc2timeline
  orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them
  ☆34Updated 7 months ago
• Sam0x90 / CB-Threat-Hunting
  CarbonBlack EDR detection rules and response actions
  ☆73Updated last year
• jstrosch / subcrawl
  SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…
  ☆54Updated last year
• strozfriedberg / QELP
  Quick ESXi Log Parser
  ☆28Updated 3 months ago
• microsoft / tim-data-investigate-platform
  TIM is a Kusto investigation platform that enables a user to quickly pivot between data sources; annotate their findings; and promotes co…
  ☆23Updated last year
• WithSecureLabs / iocs
  ☆17Updated this week
• CyberCX-DFIR / usnjrnl_rewind
  USN Journal full path builder
  ☆65Updated last year
• cybergoatpsyops / detections
  Placeholder for my detection repo and misc detection engineering content
  ☆42Updated 2 years ago
• stuxnet999 / EventTranscriptParser
  Python based tool to extract forensic info from EventTranscript.db (Windows Diagnostic Data)
  ☆68Updated 2 years ago
• mthcht / ThreatHunting-Keywords-sigma-rules
  Sigma detection rules for hunting with the threathunting-keywords project
  ☆57Updated 10 months ago
• delivr-to / detections
  A home for detection content developed by the delivr.to team
  ☆73Updated 5 months ago
• a1l4m / Mac-Triage
  A powerful macOS triage collection tool designed for forensic analysis. It gathers critical system artifacts such as FSEvents, Spotlight,…
  ☆31Updated 3 months ago
• DCScoder / ESXiTri
  ESXi Cyber Security Incident Response Script
  ☆25Updated last year
• joeavanzato / crackdown
  Helping Incident Responders hunt for potential persistence mechanisms on UNIX-based systems.
  ☆17Updated 2 years ago
• brokensound77 / LoFP
  Living off the False Positive!
  ☆41Updated 11 months ago
• fboldewin / YARA_Detection_Engineering
  Detection Engineering with YARA
  ☆86Updated 2 years ago