Alternatives and similar repositories for Fastir_Collector_Linux

Users that are interested in Fastir_Collector_Linux are comparing it to the libraries listed below

• Cyb3rWard0g / Invoke-ATTACKAPI
  A PowerShell script to interact with the MITRE ATT&CK Framework via its own API
  ☆370Updated 6 years ago
• SekoiaLab / Fastir_Collector
  ☆519Updated 4 years ago
• Kirtar22 / Litmus_Test
  Detecting ATT&CK techniques & tactics for Linux
  ☆257Updated 5 years ago
• n0dec / MalwLess
  Test Blue Team detections without running any attack.
  ☆271Updated last year
• jymcheong / AutoTTP
  Automated Tactics Techniques & Procedures
  ☆259Updated 2 years ago
• 0x4D31 / deception-as-detection
  Deception based detection techniques mapped to the MITRE’s ATT&CK framework
  ☆288Updated 8 years ago
• rastrea2r / rastrea2r
  Collecting & Hunting for IOCs with gusto and style
  ☆241Updated 4 years ago
• keithjjones / hostintel
  A modular Python application to collect intelligence for malicious hosts.
  ☆270Updated 4 years ago
• randomuserid / Adama
  Searches For Threat Hunting and Security Analytics
  ☆237Updated 8 months ago
• fox-it / danderspritz-evtx
  Parse evtx files and detect use of the DanderSpritz eventlogedit module
  ☆150Updated 8 years ago
• ChrisRimondi / VulntoES
  Vulnerability Data in ES
  ☆143Updated 8 years ago
• mandiant / ioc_writer
  ☆206Updated 2 years ago
• CERT-W / certitude
  The Seeker of IOC
  ☆131Updated 5 years ago
• travisfoley / dfirtriage
  Digital forensic acquisition tool for Windows based incident response.
  ☆346Updated last year
• P4T12ICK / ypsilon
  Automated Use Case Testing
  ☆171Updated 7 years ago
• brakmic / Sinkholes
  Malware Sinkhole List in various formats
  ☆102Updated 3 years ago
• abhinavbom / Threat-Intelligence-Hunter
  TIH is an intelligence tool that helps you in searching for IOCs across multiple openly available security feeds and some well known APIs…
  ☆156Updated 6 months ago
• dgunter / evtxtoelk
  A lightweight tool to load Windows Event Log evtx files into Elasticsearch.
  ☆119Updated 5 years ago
• THIBER-ORG / userline
  Query and report user logons relations from MS Windows Security Events
  ☆242Updated 7 years ago
• cyberark / ketshash
  A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs.
  ☆172Updated 10 months ago
• SupportIntelligence / Icewater
  16,432 Free Yara rules created by
  ☆390Updated 6 years ago
• beahunt3r / Windows-Hunting
  ☆348Updated 4 years ago
• JPCERTCC / DetectLM
  Detecting Lateral Movement with Machine Learning
  ☆139Updated 8 years ago
• passivetotal / python_api
  Python abstract API for PassiveTotal services in the form of libraries and command line utilities.
  ☆86Updated 2 years ago
• ciscocsirt / GOSINT
  The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs).
  ☆550Updated 2 years ago
• salesforce / bro-sysmon
  How to Zeek Sysmon Logs!
  ☆103Updated 3 years ago
• mitre / brawl-public-game-001
  Data from a BRAWL Automated Adversary Emulation Exercise
  ☆211Updated 5 years ago
• Cyb3rPandaH / Tableau-ATTCK
  Understanding ATT&CK Matrix for Enterprise
  ☆81Updated 7 years ago
• gleeda / memtriage
  Allows you to quickly query a Windows machine for RAM artifacts
  ☆219Updated 5 years ago
• JustinAzoff / zeek-pdns
  Passive DNS collection using Zeek
  ☆181Updated 2 years ago