TcM1911 / stix2Links
A pure Go library for working with Structured Threat Information Expression (STIX™) version 2.x data
☆23Updated 4 months ago
Alternatives and similar repositories for stix2
Users that are interested in stix2 are comparing it to the libraries listed below
Sorting:
- APIs for generating STIX 2.1 and TAXII 2.1 messages with Go (Golang)☆54Updated 9 months ago
- A Go implementation and parser for Sigma rules.☆92Updated 4 months ago
- Golang library that implements a sigma log rule parser and match engine.☆100Updated last year
- Firepit - STIX Columnar Storage☆16Updated last year
- A cyber threat intelligence server based on TAXII 2 and written in Golang☆31Updated 6 years ago
- stix-icons is a collection of colourful and clean icons for use in software, training and marketing material to visualize cyber threats a…☆35Updated 2 years ago
- gyp: A pure Go YARA parser☆106Updated last year
- Yara powered NIDS with high speed packet capture powered by PF_RING☆69Updated last year
- Go implementation of the Community ID flow hashing standard☆20Updated 5 months ago
- ☆222Updated last year
- suricata eve.json parser in Go☆15Updated 6 years ago
- Indicator Extractor☆140Updated 7 years ago
- A Golang API for TheHive☆13Updated 5 years ago
- Build a local copy of MITRE ATT&CK and CAPEC. Server mode for easy querying.☆33Updated last week
- OASIS TC Open Repository: Match STIX content against STIX patterns☆46Updated 3 years ago
- Golang Library to interact with your MISP instance☆22Updated 6 years ago
- Graphoscope is a solution to access multiple independent data sources from a common UI and show data relations as a graph☆39Updated 9 months ago
- This project is no longer maintained. There's a successor at https://github.com/zeek/zeek-agent-v2☆123Updated 4 years ago
- Structured Threat Intelligence Graph☆96Updated 5 months ago
- A lightweight tool to score network traffic and flag anomalies☆123Updated last year
- enpoint detection / live analysis & sandbox host / signatures quality test☆44Updated 4 years ago
- fast, extensible, versatile event router for Suricata's EVE-JSON format☆56Updated this week
- Specifications used in the MISP project including MISP core format☆52Updated 2 months ago
- Open source endpoint agent providing host information to Zeek. [v2]☆85Updated 2 weeks ago
- Collect autorun records from running system☆60Updated 3 years ago
- Tools for parsing rulesets using the exact grammar as YARA. Written in Go.☆85Updated 2 years ago
- ☆34Updated 5 years ago
- Translate STIX 2 Patterning Queries☆31Updated 6 years ago
- Cisco Orbital - Osquery queries by Talos☆135Updated last year
- Sighting DB is designed to scale writing and reading a count of attributes, tracking when if was first and last seen☆16Updated last year