HolmesProcessing / Holmes-Gateway
Main program for receiving tasking and objects. It validates input, checks authentication, and pushes the requests to the pipeline.
☆13Updated 7 years ago
Alternatives and similar repositories for Holmes-Gateway:
Users that are interested in Holmes-Gateway are comparing it to the libraries listed below
- The Storage Planner manages access to all data within the Holmes Processing system. It orchestrates the interaction across multiple Datab…☆16Updated 6 years ago
- Investigation Planner for long running analysis with unpredictable execution time. For example, dynamic analysis.☆15Updated 8 years ago
- website☆9Updated 4 years ago
- Investigation Planner for fast running analysis with predictable execution time. For example, static analysis.☆29Updated 5 years ago
- (OBSOLETE) Plugins for Bro☆53Updated 7 years ago
- OASIS TC Open Repository: STIX Enhancement Proposals (SEPs) https://github.com/oasis-open/cti-sep-repository☆16Updated last year
- Time-Machine Dynamic Bulk Packet Recorder☆36Updated this week
- Tool to extract indicators of compromise from security reports in PDF format☆34Updated 9 years ago
- Generate STIX XML from OpenIOC XML☆92Updated 6 years ago
- AMICO - Accurate Behavior-Based Detection of Malware Downloads☆31Updated 7 years ago
- Unifiedbeat reads records from Unified2 binary files generated by network intrusion detection software and indexes the records in Elastic…☆30Updated 8 years ago
- Packetpig - Open Source Big Data Security Analytics☆298Updated 6 years ago
- OASIS OpenC2 TC: Repository for submitting and reviewing OpenC2 use cases relevant to the work of the OpenC2 Language Subcommittee (LSC)☆28Updated 3 years ago
- threat language parser☆60Updated 10 years ago
- OASIS TC Open Repository: Match STIX content against STIX patterns☆44Updated 2 years ago
- Flow-Indexer indexes flows found in chunked log files from bro,nfdump,syslog, or pcap files☆44Updated 11 months ago
- ☆28Updated 8 years ago
- TAXII client implementation from EclecticIQ☆99Updated 3 years ago
- vagrant multi-machine: Moloch, Bro,Suricata,ElasticSearch,Kibana☆41Updated 10 years ago
- DGA Domains detection☆66Updated 7 years ago
- Bro/Zeek integration with osquery☆94Updated 4 years ago
- A project to label the VirusShare malware corpus using VirusTotal's public API.☆30Updated 2 years ago
- Python library for Cymon.io APIs☆32Updated 8 years ago
- Bro Snippets☆21Updated 10 years ago
- ☆25Updated 9 years ago
- Realtime and Online Model Development Framework☆27Updated 7 years ago
- Thug's Rumāl: a Thug's dress & weapon☆37Updated 8 years ago
- Yara is awesome, but sometimes you need to manipulate the data streams you're scanning in different ways.☆97Updated 10 years ago
- Ansible playbook to install Malware Information Sharing Platform (MISP)☆17Updated 10 years ago
- A utility repo to assist with converting between MISP and STIX formats☆68Updated 4 years ago