Alternatives and similar repositories for SANS-summit

Users that are interested in SANS-summit are comparing it to the libraries listed below

• Qihoo360 / Luwak
  利用预训练语言模型从非结构化威胁报告中提取 MITRE ATT&CK TTP 信息
  ☆73Updated 2 years ago
• G4rb3n / Script-Ganker
  恶意脚本检测分类工具
  ☆40Updated 4 years ago
• JDArmy / RTASS
  红蓝对抗量化评估系统（Red Team Assessment Scoring System）
  ☆210Updated 2 years ago
• ainrm / cobaltstrike-suricata-rules
  17条检测cobaltstrike的suricata-ids规则
  ☆67Updated 3 years ago
• theSecHunter / Hades
  Hades is an cross-platform HIDS with kernel-space data collection.
  ☆46Updated 2 years ago
• manning23 / ATTCK-technical-data
  ATT&CK技战术数据
  ☆16Updated 4 years ago
• tingting7788 / DataSec
  ☆17Updated 2 years ago
• tianyulab / Threat_Hunting_with_ELK
  天御攻防实验室 - 威胁猎杀实战系列
  ☆102Updated 6 years ago
• LennyLeng / SOC_Sankey_Generator
  ☆57Updated 4 years ago
• Qianlitp / WatchAD-Web
  A simple web platform for WatchAD
  ☆110Updated 2 years ago
• 404notf0und / FXY
  Security-Scenes-Feature-Engineering-Toolkit, Continuous Integration.一款安全数据特征化工具
  ☆59Updated 2 years ago
• oasiszrz / XAIGen
  ☆84Updated 4 years ago
• RedDrip7 / Log4Shell_CVE-2021-44228_related_attacks_IOCs
  ☆46Updated 3 years ago
• n4ll3ec / ThreatHound
  ThreatHound is a threat intelligence query tool use for detecting potentially malicious IP or domains. It combines the MISP open source t…
  ☆40Updated 5 years ago
• huifeidexingyuner / Hacker_analyse
  黑客画像构建以及威胁事件的预测，通过搜集各大黑客技术论坛的聊天记录，绘制任务的拓扑图，以及技能雷达图。同时进一步预测监控攻击事件的发生以及溯源
  ☆21Updated 6 years ago
• JiaHeng-DLUT / Webshell-samples
  webshell and nonwebshell samples，which can be used to train machine learning models to detect webshell
  ☆43Updated 6 years ago
• tianyulab / Hunting_lateral_movement
  《横向移动攻击与检测技术》专栏文章
  ☆17Updated 5 years ago
• dr0op / MsfRpcApi
  MSF RPC API调用文档及demo
  ☆52Updated last year
• md-irohas / tcppc-go
  tcppc: A simple honeypot to capture TCP/TLS/UDP payloads on ALL ports.
  ☆35Updated 4 years ago
• 404notf0und / AI-for-Security-Landing
  企业级安全智能化实践
  ☆69Updated 3 years ago
• al0ne / cloud-audit
  cloud-audit （云安全审计助手）是检测公有云厂商AK/SK泄漏被利用的工具，通过定期调用云平台接口审计日志，基于异常行为/黑特征/基线发现疑似入侵行为。
  ☆42Updated last year
• TomAPU / WAF-rules
  ☆22Updated 6 years ago
• grayddq / PypiScan
  这个脚本主要提供对pypi供应链的源头进行安全扫描研究，扫描并发现未知的恶意包情况。
  ☆28Updated 2 years ago
• cmcmsec / suricata_open
  ☆12Updated 4 years ago
• zhutougg / Awesome-Intranet_pentest_tool
  ☆80Updated 5 years ago
• cahi1l1yn / aclAuditor
  Audit your acl of network device
  ☆34Updated 5 years ago
• iiilin / inbtscan
  Python nbtstat + smb_version without third party packages
  ☆30Updated 4 years ago
• DSO-Lab / passets
  Passets 是一套开源的被动资产识别框架。
  ☆49Updated 4 years ago
• Blue-Team-CN / Attack-traffic-PACPs
  攻击流量包，辅助安全运营/分析人员，HVV蓝队工程师开展流量攻击研判工作
  ☆67Updated last year
• njcx / RuleCat
  GO开发而成，用于NIDS HIDS 分析的规则引擎，使用WorkerPool 高性能检测，支持多字段 "和" "或" 检测， 支持频率检测
  ☆77Updated 6 months ago