Alternatives and similar repositories for Holmes-Gateway

Users that are interested in Holmes-Gateway are comparing it to the libraries listed below

• HolmesProcessing / Holmes-Storage
  The Storage Planner manages access to all data within the Holmes Processing system. It orchestrates the interaction across multiple Datab…
  ☆16Updated 6 years ago
• HolmesProcessing / Holmes-Totem-Dynamic
  Investigation Planner for long running analysis with unpredictable execution time. For example, dynamic analysis.
  ☆16Updated 8 years ago
• HolmesProcessing / Holmes-Totem
  Investigation Planner for fast running analysis with predictable execution time. For example, static analysis.
  ☆28Updated 6 years ago
• zeek / bro-plugins
  (OBSOLETE) Plugins for Bro
  ☆53Updated 8 years ago
• OktaSecurityLabs / sgt
  Osquery Mangement Server
  ☆114Updated 5 years ago
• cmu-sei / cyobstract
  A tool to extract structured cyber information from incident reports.
  ☆82Updated 7 years ago
• harvard-itsecurity / docker-misp
  Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing
  ☆176Updated 4 years ago
• sroberts / cacador
  Indicator Extractor
  ☆140Updated 7 years ago
• google / testimony
  Testimony is a single-machine, multi-process architecture for sharing AF_PACKET data across processes, allowsing packets to be copied fro…
  ☆108Updated 4 years ago
• DavidJBianco / Bro2Graph
  ☆25Updated 10 years ago
• jandre / brosquery
  module for osquery to load Bro logs into tables
  ☆28Updated 10 years ago
• packetloop / packetpig
  Packetpig - Open Source Big Data Security Analytics
  ☆298Updated 7 years ago
• sooshie / secrepo
  Sweet, sweet, secrepo.com html.
  ☆132Updated 4 years ago
• TcM1911 / stix2
  A pure Go library for working with Structured Threat Information Expression (STIX™) version 2.x data
  ☆25Updated 6 months ago
• threatminer / ioc_parser
  Tool to extract indicators of compromise from security reports in PDF format
  ☆35Updated 9 years ago
• exp0se / dga_detector
  DGA Domains detection
  ☆69Updated 7 years ago
• Phillipmartin / gopassivedns
  PassiveDNS in Go
  ☆125Updated 6 years ago
• google / fleetspeak
  ☆142Updated last week
• PaloAltoNetworks / minemeld-node-prototypes
  Prototypes for MineMeld nodes
  ☆39Updated 4 years ago
• TAXIIProject / libtaxii
  A Python library for handling TAXII Messages invoking TAXII Services.
  ☆72Updated 4 years ago
• zeek / packages
  The default package source of the Zeek Package Manager. Wrote a package? See the README for how to get it included.
  ☆142Updated 3 weeks ago
• rocknsm / docket
  A RESTful API frontend for Stenographer
  ☆54Updated 2 years ago
• radicallyopensecurity / PassiveScanningTool
  ☆16Updated 9 years ago
• zeek / zeek-osquery
  Bro/Zeek integration with osquery
  ☆94Updated 5 years ago
• ameihm0912 / geomodel
  IP geolocation for authentication events with MozDef
  ☆10Updated 6 years ago
• eclecticiq / cabby
  TAXII client implementation from EclecticIQ
  ☆103Updated 4 years ago
• zeek / time-machine
  Time-Machine Dynamic Bulk Packet Recorder
  ☆36Updated 6 months ago
• oasis-open / cti-pattern-matcher
  OASIS TC Open Repository: Match STIX content against STIX patterns
  ☆46Updated 3 years ago
• RuoAndo / Asura
  Massive Pcap Analyzer with Massive Multithreading (DEF CON 26)
  ☆32Updated 3 years ago
• PaloAltoNetworks / minemeld-core
  Engine of MineMeld
  ☆140Updated 2 years ago