Alternatives and similar repositories for misp-workbench:

Users that are interested in misp-workbench are comparing it to the libraries listed below

• tom8941 / MISP-IOC-Validator
  Validate IOC from MISP ; Export results and iocs to SIEM and sensors using syslog and CEF format
  ☆14Updated 8 years ago
• EC-DIGIT-CSIRC / VirusTotal-Tools
  ☆36Updated 8 years ago
• PidgeyL / MISP-Extractor
  Extract information from MISP via the API
  ☆15Updated 8 years ago
• MISP / MISPego
  Maltego Transform to put entities into MISP events
  ☆27Updated 3 years ago
• dougiep16 / actortrackr
  Home to the ActorTrackr source code
  ☆24Updated 7 years ago
• opensourcesec / malstrom
  Cyber Intel Management
  ☆48Updated 7 years ago
• lolnate / vt-hunter
  Automation for VirusTotal
  ☆31Updated 9 years ago
• iSIGHTPartners / macaroni_server
  A REST API server for yara event notifications. Mapping file hashes to yara signatures in Elasticsearch for easy hash lookup or finding h…
  ☆19Updated 9 years ago
• S03D4-164 / Hiryu
  IOC Management and Visualization Tool
  ☆47Updated 2 years ago
• paulpc / nyx
  Threat Intelligence distribution
  ☆30Updated 9 years ago
• jipegit / IRNotes
  Some IR notes
  ☆73Updated 8 years ago
• jaegeral / FireMISP
  FireEye Alert json files to MISP Malware information sharing plattform (Alpha)
  ☆32Updated 7 years ago
• hiddenillusion / IR
  Some dfir stuff
  ☆31Updated 3 years ago
• crits / mcrits
  CRITs IOC Visualization in Maltego
  ☆27Updated 10 years ago
• boolaz / BooLet
  Log Examination Tool
  ☆26Updated 8 years ago
• hempnall / broyara
  integrating bro into yara
  ☆33Updated 10 years ago
• hiddenillusion / yara-goodies
  Useful scripts, rules etc. for use with YARA
  ☆27Updated 4 years ago
• PaloAltoNetworks / misp-to-autofocus
  Script for pulling events from a MISP database and converting them to Autofocus queries.
  ☆13Updated 9 years ago
• RamadhanAmizudin / python-icap-yara
  An ICAP Server with yara scanner for URL and content.
  ☆59Updated 4 months ago
• sroberts / threat-intel-templates
  A set of templates for documenting threat intelligence
  ☆74Updated 12 years ago
• xme / cuckoomx
  CuckooMX is a project to automate analysis of files transmitted over SMTP (using the Cuckoo sandbox)
  ☆41Updated 12 years ago
• sooshie / scrape_pdf
  Python script to pull various IOCs from PDFs
  ☆15Updated 10 years ago
• kx499-zz / ostip
  ☆28Updated 8 years ago
• CERT-Bund / yara-exporter
  Exporting MISP event attributes to yara rules usable with Thor apt scanner
  ☆24Updated 8 years ago
• certtools / contactdb
  The ContactDB project was initiated to cover the need for a tool to maintain contacts for CSIRT teams
  ☆37Updated 3 years ago
• threatminer / ioc_parser
  Tool to extract indicators of compromise from security reports in PDF format
  ☆34Updated 9 years ago
• swackhamer / vt_notification_puller
  VirusTotal Intelligence Notification Puller
  ☆28Updated 8 years ago
• blackhole-em / cuckoo2STIX
  ☆37Updated 10 years ago
• wmetcalf / buildcuckoo-trusty
  A dumb set of scripts for building a cuckoo rig
  ☆61Updated 8 years ago
• Concinnity-Risks / LogisticalBudget
  This project contains code for comparing or ranking APT capabilities and operational capacity. The metrics are meant to quantify, rank, o…
  ☆35Updated 6 years ago