Alternatives and similar repositories for analyst-scripts

Users that are interested in analyst-scripts are comparing it to the libraries listed below

• sapphirex00 / Threat-Hunting
  Personal compilation of APT malware from whitepaper releases, documents and own research
  ☆267Updated 6 years ago
• neonprimetime / PhishingKitTracker
  PROJECT PAUSED 1/11/22, Tracking Threat Actor Emails in Phishing Kits. CC @PhishKitTracker on twitter if you find a #threatactoremail in …
  ☆101Updated 3 years ago
• ecstatic-nobel / Analyst-Arsenal
  A toolkit for Security Researchers
  ☆127Updated 6 years ago
• InQuest / ThreatKB
  Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)
  ☆103Updated 5 months ago
• Yara-Rules / yara-endpoint
  Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.
  ☆109Updated 7 years ago
• duo-labs / phish-collect
  Python script to hunt phishing kits
  ☆137Updated 2 years ago
• Neo23x0 / vti-dorks
  Awesome VirusTotal Intelligence Search Queries
  ☆332Updated 2 years ago
• cybercdh / phishfinder
  A tool designed to traverse phishing URL paths to search for phishing kit source code.
  ☆92Updated 3 years ago
• phage-nz / infosec-bazaar
  A collection of infosec related scripts and information.
  ☆53Updated last year
• mnemonic-no / grafeo
  Open platform for modelling, collection and exchange of knowledge
  ☆162Updated 7 months ago
• nheijmans / malzoo
  Mass static malware analysis tool
  ☆95Updated 3 years ago
• ninoseki / uzen
  Website crawler with YARA detection
  ☆90Updated 2 years ago
• Xumeiquer / yara-forensics
  Set of Yara rules for finding files using magics headers
  ☆140Updated 5 years ago
• fr0gger / vthunting
  Vthunting is a tiny script used to generate report about Virus Total hunting and send it by email, slack or telegram.
  ☆167Updated 2 years ago
• MISP / MISP-maltego
  Set of Maltego transforms to inferface with a MISP Threat Sharing instance, and also to explore the whole MITRE ATT&CK dataset.
  ☆182Updated last year
• NextronSystems / valhallaAPI
  Valhalla API Client
  ☆70Updated 2 years ago
• Neo23x0 / ti-falsepositives
  A collection of typical false positive indicators
  ☆55Updated 5 years ago
• pan-unit42 / playbook_viewer
  ☆175Updated last year
• EmergingThreats / threatresearch
  Proofpoint - Emerging Threats - Threat Research tools + publicly shared intel and documentation
  ☆81Updated 3 months ago
• sroberts / jager
  Hunting IOCs all day every day...
  ☆87Updated 2 years ago
• silascutler / MalPipe
  Malware/IOC ingestion and processing engine
  ☆108Updated 7 years ago
• jaegeral / osint-timelines
  Providing timelines based on OSINT Reports
  ☆31Updated 2 years ago
• phishdetect / phishdetect
  PhishDetect is a library to help identify phishing pages
  ☆109Updated 2 years ago
• woj-ciech / Daily-dose-of-malware
  Script lets you gather malicious software and c&c servers from open source platforms like Malshare, Malcode, Google, Cymon - vxvault, cyb…
  ☆39Updated 6 years ago
• albertzsigovits / malware-tools
  A curated list of malware repositories, trackers and malware analysis tools
  ☆91Updated 2 years ago
• SCILabsMX / yaraZeekAlert
  This script scans the files extracted by Zeek with YARA rules located on the rules folder on a Linux based Zeek sensor, if there is a mat…
  ☆62Updated 2 years ago
• keithjjones / fileintel
  A modular Python application to pull intelligence about malicious files
  ☆123Updated 5 years ago
• botherder / pcqf
  pcqf (PC Quick Forensics) helps quickly gathering forensic evidence from Windows, Mac, and Linux systems, in order to identify potential …
  ☆135Updated 2 years ago
• cudeso / tools
  Different tools, koen.vanimpe@cudeso.be
  ☆136Updated 5 months ago
• ElevenPaths / thethe
  thethe
  ☆116Updated 5 years ago