HolmesProcessing / Holmes-StorageLinks
The Storage Planner manages access to all data within the Holmes Processing system. It orchestrates the interaction across multiple Databases, serves the files for analysis, etc.
☆16Updated 6 years ago
Alternatives and similar repositories for Holmes-Storage
Users that are interested in Holmes-Storage are comparing it to the libraries listed below
Sorting:
- Main program for receiving tasking and objects. It validates input, checks authentication, and pushes the requests to the pipeline.☆14Updated 8 years ago
- Investigation Planner for fast running analysis with predictable execution time. For example, static analysis.☆28Updated 6 years ago
- Investigation Planner for long running analysis with unpredictable execution time. For example, dynamic analysis.☆16Updated 8 years ago
- ☆30Updated 7 years ago
- Set of scripts to index PCAP files and retrieve packets☆14Updated 10 years ago
- Workbench: A scalable python framework for security research and development teams.☆92Updated 6 years ago
- Code for Rumal Backend that will interface with Thug Daemon☆11Updated 8 years ago
- (OBSOLETE) Plugins for Bro☆53Updated 8 years ago
- A highly efficient Bloom filter library and command line tool written in Go.☆77Updated 3 years ago
- ☆12Updated 8 years ago
- The front end Angular repository for Unfetter-Discover☆15Updated 6 years ago
- An evolutionary framework for evading machine learning-based malware classifiers.☆110Updated 3 years ago
- Packetpig - Open Source Big Data Security Analytics☆298Updated 7 years ago
- Passivedns monitor implementation in Rust.☆12Updated 9 years ago
- Malware Classifier From Network Captures☆82Updated 8 years ago
- ☆32Updated 7 years ago
- Freki is a tool to manipulate packets in usermode using NFQUEUE and golang.☆59Updated 2 years ago
- CuckooML: Machine Learning for Cuckoo Sandbox☆148Updated 3 years ago
- The Data Analysis Pipeline☆17Updated 6 years ago
- Bro Snippets☆21Updated 10 years ago
- SaltStack formula for deploying Cuckoo Sandbox☆14Updated 6 years ago
- module for osquery to load Bro logs into tables☆28Updated 10 years ago
- Time-Machine Dynamic Bulk Packet Recorder☆36Updated 6 months ago
- Docker configs and build scripts.☆22Updated 10 years ago
- Testimony is a single-machine, multi-process architecture for sharing AF_PACKET data across processes, allowsing packets to be copied fro…☆108Updated 4 years ago
- This python scripts can calculate the WHOIS Similarity Distance between two given domains.☆29Updated 2 years ago
- Things to know when DFIR occurs near a vault deployment.☆43Updated 7 years ago
- Example code for our book Introduction to Artificial Intelligence for Security Professionals☆154Updated 6 years ago
- Logging plugin to bro to send logs to a Kafka broker☆20Updated 7 years ago
- AMICO - Accurate Behavior-Based Detection of Malware Downloads☆31Updated 7 years ago