Alternatives and similar repositories for pan-stix

Users that are interested in pan-stix are comparing it to the libraries listed below

• EmergingThreats / bro

  View on GitHub
  Bro things..
  ☆15Oct 23, 2015Updated 10 years ago
• stealthllama / pandb-query

  View on GitHub
  A tool for bulk URL queries against Palo Alto Networks' PAN-DB cloud database
  ☆18Sep 11, 2023Updated 2 years ago
• swackhamer / vt_notification_puller

  View on GitHub
  VirusTotal Intelligence Notification Puller
  ☆28Jun 29, 2016Updated 9 years ago
• paulpc / nyx

  View on GitHub
  Threat Intelligence distribution
  ☆31Dec 30, 2015Updated 10 years ago
• iocaware / iocgen

  View on GitHub
  Automated IOC-Generation scripts and tools
  ☆24Sep 14, 2016Updated 9 years ago
• slupers / ThreatIntel

  View on GitHub
  Website letting users query information from many different security threat intelligence APIs
  ☆26Sep 30, 2020Updated 5 years ago
• Xen0ph0n / malwarehouse

  View on GitHub
  A warehouse for your malware
  ☆20Feb 25, 2013Updated 12 years ago
• STIXProject / stix-to-html

  View on GitHub
  Convert STIX XML to HTML
  ☆27Nov 23, 2015Updated 10 years ago
• carbonblack / cb-taxii-connector

  View on GitHub
  Connector for pulling and converting STIX information from TAXII Service Providers into CB Feeds.
  ☆15Jul 1, 2022Updated 3 years ago
• thechrisharrod / Bloodhound

  View on GitHub
  Find permanent WMI event consumers on endpoints that could be used by APT actors.
  ☆17Jun 15, 2016Updated 9 years ago
• midnightslacker / threat_intel

  View on GitHub
  Gather and compile open source threat intelligence feeds.
  ☆40Feb 19, 2022Updated 3 years ago
• yolothreat / utilitybelt

  View on GitHub
  A Python library for being a CND Batman....
  ☆35Oct 29, 2015Updated 10 years ago
• sooshie / bro-scripts

  View on GitHub
  Various Bro scripts
  ☆96Jul 8, 2016Updated 9 years ago
• hosom / bro-phishing

  View on GitHub
  Detect Phishing with Bro IDS
  ☆18Feb 1, 2017Updated 9 years ago
• jheise / threatcmd

  View on GitHub
  Cli interface to threatcrowd.org
  ☆20Jul 6, 2017Updated 8 years ago
• PaloAltoNetworks / pan-cortex-data-lake-python

  View on GitHub
  Python idiomatic SDK for Cortex™ Data Lake.
  ☆48Mar 24, 2025Updated 10 months ago
• Xen0ph0n / MIDAS

  View on GitHub
  Metadata Inspection Database Alerting System
  ☆42Jul 26, 2013Updated 12 years ago
• gcrahay / otx_misp

  View on GitHub
  Imports Alienvault OTX pulses to a MISP instance
  ☆53Sep 29, 2021Updated 4 years ago
• JustinAzoff / zeek-pdns

  View on GitHub
  Passive DNS collection using Zeek
  ☆182Jun 2, 2023Updated 2 years ago
• PaloAltoNetworks / autofocus-lenz

  View on GitHub
  A command line utility to aid in using autofocus for IR and research
  ☆27Oct 22, 2019Updated 6 years ago
• coolacid / docker-snort

  View on GitHub
  Snort in a Docker Container
  ☆31Mar 21, 2014Updated 11 years ago
• kevinsteves / pan-python

  View on GitHub
  Multi-tool set for Palo Alto Networks PAN-OS, Panorama, WildFire and AutoFocus
  ☆281Jul 17, 2024Updated last year
• GDSSecurity / burpee

  View on GitHub
  Python object interface to requests/responses recorded by Burp Suite
  ☆37Jan 21, 2020Updated 6 years ago
• jtschichold / panwdbl

  View on GitHub
  Simple block lists hub for PAN-OS DBL feature
  ☆35Jan 17, 2019Updated 7 years ago
• QinetiQ-Cyber-Intelligence / OpenCTI-Terraform

  View on GitHub
  A highly available AWS deployment of the Threat Intelligence platform, OpenCTI using Terraform. Native AWS resources are used where feasi…
  ☆38Apr 23, 2023Updated 2 years ago
• hiddenillusion / IR

  View on GitHub
  Some dfir stuff
  ☆31Jan 12, 2022Updated 4 years ago
• PaloAltoNetworks / report_to_misp

  View on GitHub
  Parse a report and import the events into MISP
  ☆30Oct 19, 2015Updated 10 years ago
• jaimeblasco / AlienvaultLabs

  View on GitHub
  Alienvault Labs Projects Random Stuff
  ☆79Sep 24, 2013Updated 12 years ago
• mayfield / ecmcli

  View on GitHub
  Cradlepoint ECM Command Line Interface
  ☆11Mar 7, 2023Updated 2 years ago
• alertmanager / alert_manager

  View on GitHub
  Splunk Alert Manager with advanced reporting on alerts, workflows (modify assignee, status, severity) and auto-resolve features
  ☆83Apr 26, 2022Updated 3 years ago
• awslabs / amazon-inspector-finding-forwarder

  View on GitHub
  Python scripts to run in AWS Lambda to process findings from Amazon Inspector
  ☆40Jan 14, 2026Updated last month
• daniel-gallagher / cuckoo-autoinstall

  View on GitHub
  Automated install scripts for Cuckoo sandbox
  ☆38Dec 5, 2017Updated 8 years ago
• 3c7 / bazaar

  View on GitHub
  Python based CLI for MalwareBazaar
  ☆39Jul 22, 2025Updated 6 months ago
• proofpoint / NagUI

  View on GitHub
  Next Gen Nagios UI
  ☆17Jul 14, 2014Updated 11 years ago
• ByteRay-Labs / Query-Hub

  View on GitHub
  CQL Hub is an open repository of detection and hunting queries for CrowdStrike NextGen SIEM and Falcon LogScale. All queries stored here …
  ☆33Feb 2, 2026Updated last week
• juju4 / ansible-mhn

  View on GitHub
  Modern Honey Network deployment with ansible
  ☆12Jun 4, 2022Updated 3 years ago
• JustinAzoff / splunk-scripts

  View on GitHub
  some scripts for splunk
  ☆53Jan 2, 2020Updated 6 years ago
• exp0se / harbinger

  View on GitHub
  Harbinger Threat Intelligence
  ☆83Dec 8, 2015Updated 10 years ago
• STIXProject / stix-viz

  View on GitHub
  STIX Visualization Tool
  ☆110Jul 13, 2018Updated 7 years ago