Alternatives and similar repositories for SANS-summit

Users that are interested in SANS-summit are comparing it to the libraries listed below

• theSecHunter / Hades
  Hades is an cross-platform HIDS with kernel-space data collection.
  ☆45Updated 2 years ago
• ainrm / cobaltstrike-suricata-rules
  17条检测cobaltstrike的suricata-ids规则
  ☆66Updated 3 years ago
• RedDrip7 / Log4Shell_CVE-2021-44228_related_attacks_IOCs
  ☆45Updated 3 years ago
• JDArmy / RTASS
  红蓝对抗量化评估系统（Red Team Assessment Scoring System）
  ☆202Updated 2 years ago
• Qihoo360 / Luwak
  利用预训练语言模型从非结构化威胁报告中提取 MITRE ATT&CK TTP 信息
  ☆73Updated last year
• G4rb3n / Script-Ganker
  恶意脚本检测分类工具
  ☆40Updated 4 years ago
• tianyulab / Hunting_lateral_movement
  《横向移动攻击与检测技术》专栏文章
  ☆17Updated 5 years ago
• JiaHeng-DLUT / Webshell-samples
  webshell and nonwebshell samples，which can be used to train machine learning models to detect webshell
  ☆43Updated 6 years ago
• tianyulab / Threat_Hunting_with_ELK
  天御攻防实验室 - 威胁猎杀实战系列
  ☆102Updated 5 years ago
• Mario-NDR / Mario
  Mario.NDR 基础框架
  ☆4Updated 3 years ago
• TomAPU / WAF-rules
  ☆22Updated 5 years ago
• master3values / Attack-Cloud
  Att&ck Cloud相关
  ☆21Updated 4 years ago
• zhutougg / Awesome-Intranet_pentest_tool
  ☆80Updated 4 years ago
• al0ne / cloud-audit
  cloud-audit （云安全审计助手）是检测公有云厂商AK/SK泄漏被利用的工具，通过定期调用云平台接口审计日志，基于异常行为/黑特征/基线发现疑似入侵行为。
  ☆40Updated last year
• safest-place / ExploitPcapCollection
  collect some exploit traffic pcap
  ☆85Updated 3 months ago
• qiyeboy / kill_webshell_detect
  总结了免杀webshell的方法论
  ☆48Updated 4 years ago
• JDArmy / DSRE
  数据安全风险枚举框架（Data Security Risk Enumeration）
  ☆50Updated 11 months ago
• tingting7788 / DataSec
  ☆17Updated last year
• redbullsecteam / intrusion-detection-wiki
  ☆11Updated 5 years ago
• grayddq / PypiScan
  这个脚本主要提供对pypi供应链的源头进行安全扫描研究，扫描并发现未知的恶意包情况。
  ☆29Updated 2 years ago
• manning23 / ATTCK-technical-data
  ATT&CK技战术数据
  ☆16Updated 4 years ago
• md-irohas / tcppc-go
  tcppc: A simple honeypot to capture TCP/TLS/UDP payloads on ALL ports.
  ☆35Updated 4 years ago
• LennyLeng / SOC_Sankey_Generator
  ☆57Updated 4 years ago
• h2-stack / LL-RASP
  Low-level RASP: Protecting Applications Implemented in High-level Programming Languages
  ☆63Updated last year
• hooog / webshellDc
  ☆20Updated 4 years ago
• angelwhu / jvm-rasp
  基于JVM-Sandbox实现RASP安全监控防护
  ☆52Updated last year
• ASTTeam / DAST
  《深入理解DAST动态应用程序安全测试》Dynamic Application Security Testing.
  ☆52Updated 2 years ago
• Blue-Team-CN / Attack-traffic-PACPs
  攻击流量包，辅助安全运营/分析人员，HVV蓝队工程师开展流量攻击研判工作
  ☆66Updated last year
• boy-hack / nmap-parser
  nmap-service-probes parser
  ☆68Updated 4 years ago
• XiaoXiaoGuaiXiaShi / OpenSource-HoneyPot
  对开源蜜罐的学习研究与理解
  ☆56Updated 4 years ago